Aegis
All events
// Operations

Authentication Success

Kerberos TGT issued for lgarcia from 10.4.12.37 (logon type 3)

EVT-99E35DInfo

Same principal

Other activity for lgarcia around this time

Hunt
TimeEventSeverityHost
2026-09-03 14:18:21ZAuthentication SuccessInfoWS-FIN-011
2026-09-03 15:26:24ZAuthentication SuccessInfoWS-FIN-007
2026-09-03 15:36:34ZAuthentication SuccessInfoWS-FIN-004
2026-09-03 15:44:00ZAuthentication SuccessInfoWS-FIN-007
2026-09-03 15:58:09ZAuthentication SuccessInfoWS-FIN-007

Same source address

Other activity from 10.4.12.37

TimeEventUserCountry
2026-09-03 14:28:00ZAuthentication SuccessdnakamuraUSA
2026-09-03 14:31:47ZAuthentication SuccesscdiazUSA
2026-09-03 15:08:57ZNetwork Deny——
2026-09-03 15:20:43ZAuthentication SuccesskthompsonUSA
2026-09-03 15:21:55ZAuthentication SuccessbpatelUSA

Record

Source
WIN-DC01Active Directory
Event type
AUTHENTICATION_SUCCESS
Action
logon
Status
success
Location
Chicago, USA
Observed

Pivot

Every identifier on this record, as a one-click hunt.