Aegis
// Operations

Event stream

Normalised telemetry from every connected source, newest first. For field-level hunting across the full dataset, use the hunt console.

1.6kevents stored
Open hunt console

Telemetry

Showing 721–780 of 1.6k

Timestamp (UTC)SeverityEvent typeSourceUserSource IPMessage
InfoAuthentication SuccessWIN-DC01jmercier10.4.12.22Kerberos TGT issued for jmercier from 10.4.12.22 (logon type 3)
InfoProcess Executionubuntu-web-01——execve: /usr/bin/nginx (uid=33 euid=33)
InfoAuthentication SuccessWIN-DC01bpatel10.4.12.21Kerberos TGT issued for bpatel from 10.4.12.21 (logon type 3)
InfoAuthentication SuccessWIN-DC01fokoye10.4.12.24Kerberos TGT issued for fokoye from 10.4.12.24 (logon type 3)
InfoAuthentication SuccessWIN-DC01hlindqvist10.4.12.35Kerberos TGT issued for hlindqvist from 10.4.12.35 (logon type 3)
InfoAuthentication SuccessWIN-DC01cdiaz10.4.12.28Kerberos TGT issued for cdiaz from 10.4.12.28 (logon type 3)
InfoNetwork AllowPalo Alto Edge—10.4.12.43allow tcp 10.4.12.43:3459 -> 182.202.108.18:443 policy="egress-standard"
InfoProcess Executionubuntu-web-01——execve: /usr/bin/sshd (uid=33 euid=33)
InfoAuthentication SuccessWIN-DC01dnakamura10.4.12.28Kerberos TGT issued for dnakamura from 10.4.12.28 (logon type 3)
InfoAuthentication SuccessWIN-DC01lgarcia10.4.12.42Kerberos TGT issued for lgarcia from 10.4.12.42 (logon type 3)
InfoAuthentication SuccessWIN-DC01kthompson10.4.12.35Kerberos TGT issued for kthompson from 10.4.12.35 (logon type 3)
InfoNetwork AllowPalo Alto Edge—10.4.12.34allow tcp 10.4.12.34:6224 -> 160.17.114.55:443 policy="egress-standard"
InfoCloud Api CallAWS CloudTrailhlindqvist10.4.12.22DescribeSecurityGroups by arn:aws:iam::4419:user/hlindqvist succeeded
InfoAuthentication SuccessWIN-DC01lgarcia10.4.12.28Kerberos TGT issued for lgarcia from 10.4.12.28 (logon type 3)
InfoProcess Executionubuntu-web-01——execve: /usr/bin/node (uid=33 euid=33)
InfoAuthentication SuccessWIN-DC01lgarcia10.4.12.22Kerberos TGT issued for lgarcia from 10.4.12.22 (logon type 3)
InfoCloud Api CallAWS CloudTrailbpatel10.4.12.28DescribeSecurityGroups by arn:aws:iam::4419:user/bpatel succeeded
InfoAuthentication SuccessWIN-DC01dnakamura10.4.12.36Kerberos TGT issued for dnakamura from 10.4.12.36 (logon type 3)
InfoAuthentication SuccessWIN-DC01gsimmons10.4.12.40Kerberos TGT issued for gsimmons from 10.4.12.40 (logon type 3)
InfoAuthentication SuccessWIN-DC01ekowalski10.4.12.25Kerberos TGT issued for ekowalski from 10.4.12.25 (logon type 3)
InfoAuthentication SuccessWIN-DC01jmercier10.4.12.36Kerberos TGT issued for jmercier from 10.4.12.36 (logon type 3)
InfoNetwork AllowPalo Alto Edge—10.4.12.35allow tcp 10.4.12.35:15435 -> 141.87.194.125:443 policy="egress-standard"
InfoCloud Api CallAWS CloudTraildnakamura10.4.12.35DescribeSecurityGroups by arn:aws:iam::4419:user/dnakamura succeeded
InfoProcess Executionubuntu-web-01——execve: /usr/bin/cron (uid=33 euid=33)
InfoCloud Api CallAWS CloudTrailjmercier10.4.12.31DescribeSecurityGroups by arn:aws:iam::4419:user/jmercier succeeded
InfoProcess Executionubuntu-web-01——execve: /usr/bin/sshd (uid=33 euid=33)
InfoAuthentication SuccessWIN-DC01gsimmons10.4.12.27Kerberos TGT issued for gsimmons from 10.4.12.27 (logon type 3)
InfoAuthentication SuccessWIN-DC01jmercier10.4.12.24Kerberos TGT issued for jmercier from 10.4.12.24 (logon type 3)
InfoAuthentication SuccessWIN-DC01bpatel10.4.12.24Kerberos TGT issued for bpatel from 10.4.12.24 (logon type 3)
LowAuthentication FailureWIN-DC01kthompson10.4.12.27Pre-authentication failed for kthompson from 10.4.12.27 (status 0x18: bad password)
InfoAuthentication SuccessWIN-DC01bpatel10.4.12.27Kerberos TGT issued for bpatel from 10.4.12.27 (logon type 3)
InfoNetwork AllowPalo Alto Edge—10.4.12.26allow tcp 10.4.12.26:2402 -> 132.19.246.102:443 policy="egress-standard"
LowNetwork DenyPalo Alto Edge—10.4.12.43deny tcp 10.4.12.43:18161 -> 204.243.136.49:443 policy="egress-standard"
InfoAuthentication SuccessWIN-DC01gsimmons10.4.12.31Kerberos TGT issued for gsimmons from 10.4.12.31 (logon type 3)
InfoProcess Executionubuntu-web-01——execve: /usr/bin/node (uid=33 euid=33)
InfoAuthentication SuccessWIN-DC01cdiaz10.4.12.24Kerberos TGT issued for cdiaz from 10.4.12.24 (logon type 3)
InfoAuthentication SuccessWIN-DC01gsimmons10.4.12.37Kerberos TGT issued for gsimmons from 10.4.12.37 (logon type 3)
InfoNetwork AllowPalo Alto Edge—10.4.12.27allow tcp 10.4.12.27:23657 -> 202.231.160.138:443 policy="egress-standard"
InfoProcess Executionubuntu-web-01——execve: /usr/bin/node (uid=33 euid=33)
InfoAuthentication SuccessWIN-DC01jmercier10.4.12.31Kerberos TGT issued for jmercier from 10.4.12.31 (logon type 3)
LowAuthentication FailureWIN-DC01ivanov10.4.12.36Pre-authentication failed for ivanov from 10.4.12.36 (status 0x18: bad password)
InfoAuthentication SuccessWIN-DC01kthompson10.4.12.36Kerberos TGT issued for kthompson from 10.4.12.36 (logon type 3)
InfoAuthentication SuccessWIN-DC01fokoye10.4.12.20Kerberos TGT issued for fokoye from 10.4.12.20 (logon type 3)
InfoAuthentication SuccessWIN-DC01lgarcia10.4.12.30Kerberos TGT issued for lgarcia from 10.4.12.30 (logon type 3)
InfoAuthentication SuccessWIN-DC01kthompson10.4.12.27Kerberos TGT issued for kthompson from 10.4.12.27 (logon type 3)
InfoAuthentication SuccessWIN-DC01bpatel10.4.12.20Kerberos TGT issued for bpatel from 10.4.12.20 (logon type 3)
InfoProcess Executionubuntu-web-01——execve: /usr/bin/cron (uid=33 euid=33)
InfoAuthentication SuccessWIN-DC01dnakamura10.4.12.26Kerberos TGT issued for dnakamura from 10.4.12.26 (logon type 3)
InfoAuthentication SuccessWIN-DC01awhitmore10.4.12.43Kerberos TGT issued for awhitmore from 10.4.12.43 (logon type 3)
InfoAuthentication SuccessWIN-DC01kthompson10.4.12.31Kerberos TGT issued for kthompson from 10.4.12.31 (logon type 3)
InfoAuthentication SuccessWIN-DC01bpatel10.4.12.26Kerberos TGT issued for bpatel from 10.4.12.26 (logon type 3)
InfoProcess Executionubuntu-web-01——execve: /usr/bin/systemd (uid=33 euid=33)
InfoNetwork AllowPalo Alto Edge—10.4.12.42allow tcp 10.4.12.42:35397 -> 178.17.220.95:443 policy="egress-standard"
InfoNetwork AllowPalo Alto Edge—10.4.12.28allow tcp 10.4.12.28:6579 -> 113.71.144.147:443 policy="egress-standard"
InfoAuthentication SuccessWIN-DC01dnakamura10.4.12.30Kerberos TGT issued for dnakamura from 10.4.12.30 (logon type 3)
LowNetwork DenyPalo Alto Edge—10.4.12.26deny tcp 10.4.12.26:14083 -> 53.11.218.13:443 policy="egress-standard"
InfoProcess Executionubuntu-web-01——execve: /usr/bin/python3 (uid=33 euid=33)
InfoAuthentication SuccessWIN-DC01ekowalski10.4.12.27Kerberos TGT issued for ekowalski from 10.4.12.27 (logon type 3)
InfoProcess Executionubuntu-web-01——execve: /usr/bin/nginx (uid=33 euid=33)
InfoProcess Executionubuntu-web-01——execve: /usr/bin/node (uid=33 euid=33)
Page 13 of 26
PreviousNext