All events
// Operations

Authentication Success

Kerberos TGT issued for cdiaz from 10.4.12.37 (logon type 3)

EVT-68FA72Info

Same principal

Other activity for cdiaz around this time

TimeEventSeverityHost
2026-09-03 13:50:29ZAuthentication SuccessInfoWS-FIN-008
2026-09-03 14:03:21ZAuthentication SuccessInfoWS-FIN-010
2026-09-03 14:09:55ZCloud Api CallInfo
2026-09-03 14:10:25ZAuthentication SuccessInfoWS-FIN-004
2026-09-03 14:13:59ZAuthentication SuccessInfoWS-FIN-003
2026-09-03 14:16:40ZAuthentication SuccessInfoWS-FIN-005
2026-09-03 15:22:10ZAuthentication SuccessInfoWS-FIN-005

Same source address

Other activity from 10.4.12.37

TimeEventUserCountry
2026-09-03 13:51:12ZAuthentication FailurebpatelUSA
2026-09-03 14:28:00ZAuthentication SuccessdnakamuraUSA
2026-09-03 15:04:14ZAuthentication SuccesslgarciaUSA
2026-09-03 15:08:57ZNetwork Deny
2026-09-03 15:20:43ZAuthentication SuccesskthompsonUSA
2026-09-03 15:21:55ZAuthentication SuccessbpatelUSA

Record

Source
WIN-DC01Active Directory
Event type
AUTHENTICATION_SUCCESS
Action
logon
Status
success
Location
Chicago, USA
Observed

Pivot

Every identifier on this record, as a one-click hunt.