All events
// Operations

Authentication Success

Kerberos TGT issued for awhitmore from 10.4.12.31 (logon type 3)

EVT-841460Info

Same principal

Other activity for awhitmore around this time

TimeEventSeverityHost
2026-09-04 13:24:52ZAuthentication SuccessInfoWS-FIN-010
2026-09-04 13:45:55ZCloud Api CallInfo
2026-09-04 14:15:29ZAuthentication FailureLowWIN-DC01
2026-09-04 14:18:41ZAuthentication FailureLowWIN-DC01
2026-09-04 14:21:53ZAuthentication FailureLowWIN-DC01
2026-09-04 14:25:05ZAuthentication FailureLowWIN-DC01
2026-09-04 14:35:39ZAuthentication FailureLowWS-FIN-006
2026-09-04 15:05:14ZAuthentication FailureLowWS-FIN-012

Same source address

Other activity from 10.4.12.31

TimeEventUserCountry
2026-09-04 15:03:14ZAuthentication SuccessbpatelUSA

Record

Source
WIN-DC01Active Directory
Event type
AUTHENTICATION_SUCCESS
Action
logon
Status
success
Location
Chicago, USA
Observed

Pivot

Every identifier on this record, as a one-click hunt.