All events
// Operations

Authentication Success

Kerberos TGT issued for fokoye from 10.4.12.37 (logon type 3)

EVT-6D7E35Info

Same principal

Other activity for fokoye around this time

TimeEventSeverityHost
2026-09-04 14:27:47ZCloud Api CallInfo
2026-09-04 14:31:10ZAuthentication SuccessInfoWS-FIN-009
2026-09-04 15:45:25ZAuthentication SuccessInfoWS-FIN-011
2026-09-04 15:51:51ZAuthentication SuccessInfoWS-FIN-001
2026-09-04 16:16:10ZAuthentication SuccessInfoWS-FIN-008
2026-09-04 16:20:18ZCloud Api CallInfo

Same source address

Other activity from 10.4.12.37

TimeEventUserCountry
2026-09-04 14:27:50ZAuthentication SuccessekowalskiUSA
2026-09-04 14:34:10ZAuthentication FailureivanovUSA
2026-09-04 14:40:36ZNetwork Deny
2026-09-04 14:50:42ZNetwork Allow
2026-09-04 14:52:23ZAuthentication SuccessbpatelUSA
2026-09-04 15:22:23ZAuthentication SuccesscdiazUSA
2026-09-04 15:39:28ZAuthentication SuccessbpatelUSA
2026-09-04 15:41:21ZNetwork Allow
2026-09-04 15:48:57ZCloud Api Calllgarcia
2026-09-04 15:50:54ZAuthentication SuccessbpatelUSA

Record

Source
WIN-DC01Active Directory
Event type
AUTHENTICATION_SUCCESS
Action
logon
Status
success
Location
Chicago, USA
Observed

Pivot

Every identifier on this record, as a one-click hunt.