All events
// Operations

Authentication Success

Kerberos TGT issued for awhitmore from 10.4.12.40 (logon type 3)

EVT-7CD338Info

Same principal

Other activity for awhitmore around this time

TimeEventSeverityHost
2026-09-03 22:04:19ZAuthentication SuccessInfoWS-FIN-009
2026-09-03 22:26:42ZAuthentication FailureLowWS-FIN-005
2026-09-03 22:35:15ZAuthentication SuccessInfoWS-FIN-001

Same source address

Other activity from 10.4.12.40

TimeEventUserCountry
2026-09-03 21:52:54ZAuthentication SuccessbpatelUSA
2026-09-03 22:35:15ZAuthentication SuccessawhitmoreUSA

Record

Source
WIN-DC01Active Directory
Event type
AUTHENTICATION_SUCCESS
Action
logon
Status
success
Location
Chicago, USA
Observed

Pivot

Every identifier on this record, as a one-click hunt.