Aegis
All events
// Operations

Authentication Success

Kerberos TGT issued for bpatel from 10.4.12.20 (logon type 3)

EVT-2FD8A6Info

Same principal

Other activity for bpatel around this time

Hunt
TimeEventSeverityHost
2026-09-03 19:12:50ZAuthentication SuccessInfoWS-FIN-012
2026-09-03 19:31:54ZAuthentication SuccessInfoWS-FIN-011
2026-09-03 19:36:37ZAuthentication SuccessInfoWS-FIN-009
2026-09-03 20:01:59ZAuthentication SuccessInfoWS-FIN-004
2026-09-03 20:34:19ZAuthentication SuccessInfoWS-FIN-010
2026-09-03 20:36:56ZAuthentication SuccessInfoWS-FIN-001
2026-09-03 20:59:36ZCloud Api CallInfo—

Same source address

Other activity from 10.4.12.20

TimeEventUserCountry
2026-09-03 19:19:18ZAuthentication SuccesshlindqvistUSA
2026-09-03 20:13:44ZAuthentication SuccessfokoyeUSA

Record

Source
WIN-DC01Active Directory
Event type
AUTHENTICATION_SUCCESS
Action
logon
Status
success
Location
Chicago, USA
Observed

Pivot

Every identifier on this record, as a one-click hunt.