All events
// Operations

Authentication Failure

Pre-authentication failed for gsimmons from 10.4.12.43 (status 0x18: bad password)

EVT-2270CFLow

Same principal

Other activity for gsimmons around this time

TimeEventSeverityHost
2026-09-04 11:12:22ZAuthentication FailureLowWS-FIN-010

Record

Source
WIN-DC01Active Directory
Event type
AUTHENTICATION_FAILURE
Action
logon
Status
failure
Location
Chicago, USA
Observed

Pivot

Every identifier on this record, as a one-click hunt.