All events
// Operations

Authentication Success

Kerberos TGT issued for awhitmore from 10.4.12.35 (logon type 3)

EVT-C9F526Info

Same principal

Other activity for awhitmore around this time

TimeEventSeverityHost
2026-09-03 22:26:42ZAuthentication FailureLowWS-FIN-005
2026-09-03 22:27:41ZAuthentication SuccessInfoWS-FIN-004
2026-09-03 22:35:15ZAuthentication SuccessInfoWS-FIN-001

Same source address

Other activity from 10.4.12.35

TimeEventUserCountry
2026-09-03 21:12:27ZAuthentication SuccesskthompsonUSA
2026-09-03 21:19:54ZAuthentication SuccesshlindqvistUSA
2026-09-03 21:36:22ZNetwork Deny
2026-09-03 22:07:35ZAuthentication SuccessivanovUSA
2026-09-03 22:39:09ZAuthentication SuccessbpatelUSA
2026-09-03 22:45:59ZAuthentication SuccessekowalskiUSA
2026-09-03 23:02:33ZNetwork Deny

Record

Source
WIN-DC01Active Directory
Event type
AUTHENTICATION_SUCCESS
Action
logon
Status
success
Location
Chicago, USA
Observed

Pivot

Every identifier on this record, as a one-click hunt.