Aegis
All events
// Operations

Authentication Success

Kerberos TGT issued for lgarcia from 10.4.12.32 (logon type 3)

EVT-F39F0FInfo

Same principal

Other activity for lgarcia around this time

Hunt
TimeEventSeverityHost
2026-09-03 15:04:14ZAuthentication SuccessInfoWS-FIN-010
2026-09-03 15:26:24ZAuthentication SuccessInfoWS-FIN-007
2026-09-03 15:44:00ZAuthentication SuccessInfoWS-FIN-007
2026-09-03 15:58:09ZAuthentication SuccessInfoWS-FIN-007
2026-09-03 16:15:18ZAuthentication SuccessInfoWS-FIN-012

Same source address

Other activity from 10.4.12.32

TimeEventUserCountry
2026-09-03 15:30:17ZAuthentication SuccessjmercierUSA
2026-09-03 16:03:26ZAuthentication SuccessjmercierUSA
2026-09-03 16:13:17ZAuthentication SuccessgsimmonsUSA

Record

Source
WIN-DC01Active Directory
Event type
AUTHENTICATION_SUCCESS
Action
logon
Status
success
Location
Chicago, USA
Observed

Pivot

Every identifier on this record, as a one-click hunt.