Aegis
All events
// Operations

Authentication Success

Kerberos TGT issued for lgarcia from 10.4.12.25 (logon type 3)

EVT-988388Info

Same principal

Other activity for lgarcia around this time

Hunt
TimeEventSeverityHost
2026-09-04 16:44:54ZAuthentication SuccessInfoWS-FIN-012
2026-09-04 17:04:40ZAuthentication SuccessInfoWS-FIN-009
2026-09-04 17:48:54ZAuthentication SuccessInfoWS-FIN-005
2026-09-04 18:03:56ZAuthentication SuccessInfoWS-FIN-008

Same source address

Other activity from 10.4.12.25

TimeEventUserCountry
2026-09-04 17:25:11ZAuthentication SuccesskthompsonUSA
2026-09-04 17:52:54ZAuthentication FailureekowalskiUSA
2026-09-04 18:23:38ZAuthentication SuccessivanovUSA
2026-09-04 18:24:52ZAuthentication SuccessjmercierUSA
2026-09-04 18:40:30ZCloud Api Callcdiaz—

Record

Source
WIN-DC01Active Directory
Event type
AUTHENTICATION_SUCCESS
Action
logon
Status
success
Location
Chicago, USA
Observed

Pivot

Every identifier on this record, as a one-click hunt.