All entitiesHunt
HostCredential material exposed
WIN-DC01
First seen 9d ago · last seen 7d ago
Risk
88
Severe
Observed activity
Latest 50 of 63 events
| Timestamp (UTC) | Severity | Event type | Message |
|---|---|---|---|
| Critical | Credential Access | Process memory of lsass.exe dumped to disk via comsvcs.dll MiniDump | |
| High | Process Execution | Encoded PowerShell command block executed with hidden window and execution policy bypass | |
| Critical | User Created | Account 'svc_helpdesk_tmp' created by jsmith and added to group 'Domain Admins' | |
| High | Mfa Method Removed | Second-factor method 'Authenticator app' removed from account jsmith | |
| High | Authentication Success | Kerberos TGT issued for jsmith from 185.100.200.50 (logon type 10, RDP) — prior successful logon for this account originated in Chicago, USA 41 minutes earlier | |
| Low | Authentication Failure | Pre-authentication failed for jmercier from 185.100.200.50 (status 0x18: bad password) | |
| Low | Authentication Failure | Pre-authentication failed for ivanov from 185.100.200.50 (status 0x18: bad password) | |
| Low | Authentication Failure | Pre-authentication failed for hlindqvist from 185.100.200.50 (status 0x18: bad password) | |
| Low | Authentication Failure | Pre-authentication failed for gsimmons from 185.100.200.50 (status 0x18: bad password) | |
| Low | Authentication Failure | Pre-authentication failed for fokoye from 185.100.200.50 (status 0x18: bad password) | |
| Low | Authentication Failure | Pre-authentication failed for ekowalski from 185.100.200.50 (status 0x18: bad password) | |
| Low | Authentication Failure | Pre-authentication failed for dnakamura from 185.100.200.50 (status 0x18: bad password) | |
| Low | Authentication Failure | Pre-authentication failed for cdiaz from 185.100.200.50 (status 0x18: bad password) | |
| Low | Authentication Failure | Pre-authentication failed for bpatel from 185.100.200.50 (status 0x18: bad password) | |
| Low | Authentication Failure | Pre-authentication failed for awhitmore from 185.100.200.50 (status 0x18: bad password) | |
| Low | Authentication Failure | Pre-authentication failed for administrator from 185.100.200.50 (status 0x18: bad password) | |
| Low | Authentication Failure | Pre-authentication failed for svc_sql from 185.100.200.50 (status 0x18: bad password) | |
| Low | Authentication Failure | Pre-authentication failed for svc_backup from 185.100.200.50 (status 0x18: bad password) | |
| Low | Authentication Failure | Pre-authentication failed for jsmith from 185.100.200.50 (status 0x18: bad password) | |
| Low | Authentication Failure | Pre-authentication failed for lgarcia from 185.100.200.50 (status 0x18: bad password) | |
| Low | Authentication Failure | Pre-authentication failed for kthompson from 185.100.200.50 (status 0x18: bad password) | |
| Low | Authentication Failure | Pre-authentication failed for jmercier from 185.100.200.50 (status 0x18: bad password) | |
| Low | Authentication Failure | Pre-authentication failed for ivanov from 185.100.200.50 (status 0x18: bad password) | |
| Low | Authentication Failure | Pre-authentication failed for hlindqvist from 185.100.200.50 (status 0x18: bad password) | |
| Low | Authentication Failure | Pre-authentication failed for gsimmons from 185.100.200.50 (status 0x18: bad password) | |
| Low | Authentication Failure | Pre-authentication failed for fokoye from 185.100.200.50 (status 0x18: bad password) | |
| Low | Authentication Failure | Pre-authentication failed for ekowalski from 185.100.200.50 (status 0x18: bad password) | |
| Low | Authentication Failure | Pre-authentication failed for dnakamura from 185.100.200.50 (status 0x18: bad password) | |
| Low | Authentication Failure | Pre-authentication failed for cdiaz from 185.100.200.50 (status 0x18: bad password) | |
| Low | Authentication Failure | Pre-authentication failed for bpatel from 185.100.200.50 (status 0x18: bad password) | |
| Low | Authentication Failure | Pre-authentication failed for awhitmore from 185.100.200.50 (status 0x18: bad password) | |
| Low | Authentication Failure | Pre-authentication failed for administrator from 185.100.200.50 (status 0x18: bad password) | |
| Low | Authentication Failure | Pre-authentication failed for svc_sql from 185.100.200.50 (status 0x18: bad password) | |
| Low | Authentication Failure | Pre-authentication failed for svc_backup from 185.100.200.50 (status 0x18: bad password) | |
| Low | Authentication Failure | Pre-authentication failed for jsmith from 185.100.200.50 (status 0x18: bad password) | |
| Low | Authentication Failure | Pre-authentication failed for lgarcia from 185.100.200.50 (status 0x18: bad password) | |
| Low | Authentication Failure | Pre-authentication failed for kthompson from 185.100.200.50 (status 0x18: bad password) | |
| Low | Authentication Failure | Pre-authentication failed for jmercier from 185.100.200.50 (status 0x18: bad password) | |
| Low | Authentication Failure | Pre-authentication failed for ivanov from 185.100.200.50 (status 0x18: bad password) | |
| Low | Authentication Failure | Pre-authentication failed for hlindqvist from 185.100.200.50 (status 0x18: bad password) | |
| Low | Authentication Failure | Pre-authentication failed for gsimmons from 185.100.200.50 (status 0x18: bad password) | |
| Low | Authentication Failure | Pre-authentication failed for fokoye from 185.100.200.50 (status 0x18: bad password) | |
| Low | Authentication Failure | Pre-authentication failed for ekowalski from 185.100.200.50 (status 0x18: bad password) | |
| Low | Authentication Failure | Pre-authentication failed for dnakamura from 185.100.200.50 (status 0x18: bad password) | |
| Low | Authentication Failure | Pre-authentication failed for cdiaz from 185.100.200.50 (status 0x18: bad password) | |
| Low | Authentication Failure | Pre-authentication failed for bpatel from 185.100.200.50 (status 0x18: bad password) | |
| Low | Authentication Failure | Pre-authentication failed for awhitmore from 185.100.200.50 (status 0x18: bad password) | |
| Low | Authentication Failure | Pre-authentication failed for administrator from 185.100.200.50 (status 0x18: bad password) | |
| Low | Authentication Failure | Pre-authentication failed for svc_sql from 185.100.200.50 (status 0x18: bad password) | |
| Low | Authentication Failure | Pre-authentication failed for svc_backup from 185.100.200.50 (status 0x18: bad password) |
Profile
- Type
- Host
- Risk score
- 88
- Events
- 63
- Relationships
- 3
- First seen
- 2026-09-02 19:15Z
- Last seen
- 2026-09-04 19:13Z
Severity of associated events
- Critical2
- High3
- Medium0
- Low58
- Info0
Linked entities
Relationships derived from shared activity.