Aegis
All events
// Operations

Authentication Success

Kerberos TGT issued for hlindqvist from 10.4.12.38 (logon type 3)

EVT-59EB69Info

Same principal

Other activity for hlindqvist around this time

Hunt
TimeEventSeverityHost
2026-09-04 13:09:19ZAuthentication SuccessInfoWS-FIN-001
2026-09-04 13:30:32ZAuthentication SuccessInfoWS-FIN-003
2026-09-04 14:16:53ZAuthentication FailureLowWIN-DC01
2026-09-04 14:20:05ZAuthentication FailureLowWIN-DC01
2026-09-04 14:23:17ZAuthentication FailureLowWIN-DC01
2026-09-04 14:26:29ZAuthentication FailureLowWIN-DC01
2026-09-04 14:28:19ZAuthentication SuccessInfoWS-FIN-009

Same source address

Other activity from 10.4.12.38

TimeEventUserCountry
2026-09-04 14:01:58ZAuthentication SuccesslgarciaUSA

Record

Source
WIN-DC01Active Directory
Event type
AUTHENTICATION_SUCCESS
Action
logon
Status
success
Location
Chicago, USA
Observed

Pivot

Every identifier on this record, as a one-click hunt.