All events
// Operations

Authentication Success

Kerberos TGT issued for awhitmore from 10.4.12.41 (logon type 3)

EVT-2D16EAInfo

Same principal

Other activity for awhitmore around this time

TimeEventSeverityHost
2026-09-02 21:27:25ZAuthentication SuccessInfoWS-FIN-009
2026-09-02 22:05:15ZAuthentication SuccessInfoWS-FIN-001
2026-09-02 22:20:55ZAuthentication SuccessInfoWS-FIN-008
2026-09-02 22:26:04ZAuthentication SuccessInfoWS-FIN-010

Same source address

Other activity from 10.4.12.41

TimeEventUserCountry
2026-09-02 21:51:56ZAuthentication FailurecdiazUSA
2026-09-02 22:31:17ZAuthentication SuccessbpatelUSA

Record

Source
WIN-DC01Active Directory
Event type
AUTHENTICATION_SUCCESS
Action
logon
Status
success
Location
Chicago, USA
Observed

Pivot

Every identifier on this record, as a one-click hunt.