Aegis
All events
// Operations

Authentication Success

Kerberos TGT issued for fokoye from 10.4.12.38 (logon type 3)

EVT-241C0AInfo

Same principal

Other activity for fokoye around this time

Hunt
TimeEventSeverityHost
2026-09-04 15:27:40ZAuthentication SuccessInfoWS-FIN-002
2026-09-04 15:45:25ZAuthentication SuccessInfoWS-FIN-011
2026-09-04 15:51:51ZAuthentication SuccessInfoWS-FIN-001
2026-09-04 16:20:18ZCloud Api CallInfo—
2026-09-04 17:05:56ZAuthentication SuccessInfoWS-FIN-003
2026-09-04 17:06:32ZAuthentication FailureLowWS-FIN-012

Same source address

Other activity from 10.4.12.38

TimeEventUserCountry
2026-09-04 15:51:51ZAuthentication SuccessfokoyeUSA

Record

Source
WIN-DC01Active Directory
Event type
AUTHENTICATION_SUCCESS
Action
logon
Status
success
Location
Chicago, USA
Observed

Pivot

Every identifier on this record, as a one-click hunt.