Aegis
All events
// Operations

Authentication Success

Kerberos TGT issued for fokoye from 10.4.12.40 (logon type 3)

EVT-0B30A0Info

Same principal

Other activity for fokoye around this time

Hunt
TimeEventSeverityHost
2026-09-04 15:27:40ZAuthentication SuccessInfoWS-FIN-002
2026-09-04 15:51:51ZAuthentication SuccessInfoWS-FIN-001
2026-09-04 16:16:10ZAuthentication SuccessInfoWS-FIN-008
2026-09-04 16:20:18ZCloud Api CallInfo—

Same source address

Other activity from 10.4.12.40

TimeEventUserCountry
2026-09-04 14:58:38ZAuthentication SuccesshlindqvistUSA
2026-09-04 15:17:27ZAuthentication SuccessdnakamuraUSA
2026-09-04 15:39:31ZAuthentication SuccessjmercierUSA
2026-09-04 16:19:13ZAuthentication SuccesskthompsonUSA
2026-09-04 16:36:21ZCloud Api Calllgarcia—

Record

Source
WIN-DC01Active Directory
Event type
AUTHENTICATION_SUCCESS
Action
logon
Status
success
Location
Chicago, USA
Observed

Pivot

Every identifier on this record, as a one-click hunt.