Aegis
All events
// Operations

Authentication Success

Kerberos TGT issued for fokoye from 10.4.12.38 (logon type 3)

EVT-543DEEInfo

Same principal

Other activity for fokoye around this time

Hunt
TimeEventSeverityHost
2026-09-03 14:26:12ZAuthentication SuccessInfoWS-FIN-007
2026-09-03 14:28:42ZAuthentication SuccessInfoWS-FIN-007
2026-09-03 14:46:58ZAuthentication SuccessInfoWS-FIN-001
2026-09-03 15:30:56ZAuthentication SuccessInfoWS-FIN-001
2026-09-03 15:53:53ZAuthentication SuccessInfoWS-FIN-001

Same source address

Other activity from 10.4.12.38

TimeEventUserCountry
2026-09-03 14:09:02ZAuthentication SuccesskthompsonUSA
2026-09-03 15:21:06ZAuthentication SuccessgsimmonsUSA
2026-09-03 15:34:29ZNetwork Deny——
2026-09-03 16:05:46ZAuthentication SuccessdnakamuraUSA
2026-09-03 16:07:39ZNetwork Deny——

Record

Source
WIN-DC01Active Directory
Event type
AUTHENTICATION_SUCCESS
Action
logon
Status
success
Location
Chicago, USA
Observed

Pivot

Every identifier on this record, as a one-click hunt.