All events
// Operations

Authentication Success

Kerberos TGT issued for kthompson from 10.4.12.36 (logon type 3)

EVT-7669CCInfo

Same principal

Other activity for kthompson around this time

TimeEventSeverityHost
2026-09-03 20:05:22ZAuthentication SuccessInfoWS-FIN-008
2026-09-03 20:11:46ZAuthentication SuccessInfoWS-FIN-012
2026-09-03 20:36:30ZAuthentication FailureLowWS-FIN-007
2026-09-03 21:12:27ZAuthentication SuccessInfoWS-FIN-010

Same source address

Other activity from 10.4.12.36

TimeEventUserCountry
2026-09-03 19:17:30ZAuthentication SuccesscdiazUSA
2026-09-03 20:15:42ZAuthentication FailureivanovUSA
2026-09-03 20:51:37ZAuthentication SuccessjmercierUSA
2026-09-03 20:55:29ZAuthentication SuccessdnakamuraUSA

Record

Source
WIN-DC01Active Directory
Event type
AUTHENTICATION_SUCCESS
Action
logon
Status
success
Location
Chicago, USA
Observed

Pivot

Every identifier on this record, as a one-click hunt.