Aegis
All events
// Operations

Authentication Success

Kerberos TGT issued for bpatel from 10.4.12.24 (logon type 3)

EVT-CC5407Info

Same principal

Other activity for bpatel around this time

Hunt
TimeEventSeverityHost
2026-09-04 14:22:05ZAuthentication FailureLowWIN-DC01
2026-09-04 14:25:17ZAuthentication FailureLowWIN-DC01
2026-09-04 14:52:23ZAuthentication SuccessInfoWS-FIN-010
2026-09-04 14:54:41ZAuthentication SuccessInfoWS-FIN-011
2026-09-04 15:03:14ZAuthentication SuccessInfoWS-FIN-004
2026-09-04 15:17:11ZAuthentication SuccessInfoWS-FIN-005
2026-09-04 15:39:28ZAuthentication SuccessInfoWS-FIN-004
2026-09-04 15:50:54ZAuthentication SuccessInfoWS-FIN-006

Same source address

Other activity from 10.4.12.24

TimeEventUserCountry
2026-09-04 14:22:43ZNetwork Allow——
2026-09-04 14:35:39ZAuthentication FailureawhitmoreUSA
2026-09-04 14:49:48ZAuthentication SuccessjmercierUSA
2026-09-04 15:05:14ZAuthentication FailureawhitmoreUSA

Record

Source
WIN-DC01Active Directory
Event type
AUTHENTICATION_SUCCESS
Action
logon
Status
success
Location
Chicago, USA
Observed

Pivot

Every identifier on this record, as a one-click hunt.