Aegis
// Operations

Event stream

Normalised telemetry from every connected source, newest first. For field-level hunting across the full dataset, use the hunt console.

1.6kevents stored
Open hunt console

Telemetry

Showing 781–840 of 1.6k

Timestamp (UTC)SeverityEvent typeSourceUserSource IPMessage
InfoAuthentication SuccessWIN-DC01bpatel10.4.12.37Kerberos TGT issued for bpatel from 10.4.12.37 (logon type 3)
InfoCloud Api CallAWS CloudTrailcdiaz10.4.12.21DescribeSecurityGroups by arn:aws:iam::4419:user/cdiaz succeeded
InfoProcess Executionubuntu-web-01——execve: /usr/bin/python3 (uid=33 euid=33)
InfoProcess Executionubuntu-web-01——execve: /usr/bin/python3 (uid=33 euid=33)
InfoAuthentication SuccessWIN-DC01bpatel10.4.12.38Kerberos TGT issued for bpatel from 10.4.12.38 (logon type 3)
InfoAuthentication SuccessWIN-DC01gsimmons10.4.12.22Kerberos TGT issued for gsimmons from 10.4.12.22 (logon type 3)
InfoAuthentication SuccessWIN-DC01hlindqvist10.4.12.40Kerberos TGT issued for hlindqvist from 10.4.12.40 (logon type 3)
InfoAuthentication SuccessWIN-DC01dnakamura10.4.12.43Kerberos TGT issued for dnakamura from 10.4.12.43 (logon type 3)
InfoProcess Executionubuntu-web-01——execve: /usr/bin/sshd (uid=33 euid=33)
InfoProcess Executionubuntu-web-01——execve: /usr/bin/python3 (uid=33 euid=33)
InfoAuthentication SuccessWIN-DC01hlindqvist10.4.12.20Kerberos TGT issued for hlindqvist from 10.4.12.20 (logon type 3)
InfoAuthentication SuccessWIN-DC01lgarcia10.4.12.38Kerberos TGT issued for lgarcia from 10.4.12.38 (logon type 3)
InfoAuthentication SuccessWIN-DC01cdiaz10.4.12.36Kerberos TGT issued for cdiaz from 10.4.12.36 (logon type 3)
InfoNetwork AllowPalo Alto Edge—10.4.12.41allow tcp 10.4.12.41:26896 -> 144.101.216.194:443 policy="egress-standard"
InfoAuthentication SuccessWIN-DC01bpatel10.4.12.21Kerberos TGT issued for bpatel from 10.4.12.21 (logon type 3)
InfoNetwork AllowPalo Alto Edge—10.4.12.26allow tcp 10.4.12.26:31662 -> 150.49.5.10:443 policy="egress-standard"
LowNetwork DenyPalo Alto Edge—10.4.12.37deny tcp 10.4.12.37:24112 -> 22.31.211.231:443 policy="egress-standard"
LowNetwork DenyPalo Alto Edge—10.4.12.38deny tcp 10.4.12.38:22077 -> 29.133.242.141:443 policy="egress-standard"
InfoAuthentication SuccessWIN-DC01awhitmore10.4.12.24Kerberos TGT issued for awhitmore from 10.4.12.24 (logon type 3)
LowAuthentication FailureWIN-DC01cdiaz10.4.12.28Pre-authentication failed for cdiaz from 10.4.12.28 (status 0x18: bad password)
InfoAuthentication SuccessWIN-DC01ekowalski10.4.12.32Kerberos TGT issued for ekowalski from 10.4.12.32 (logon type 3)
InfoNetwork AllowPalo Alto Edge—10.4.12.37allow tcp 10.4.12.37:12627 -> 189.18.145.62:443 policy="egress-standard"
InfoAuthentication SuccessWIN-DC01awhitmore10.4.12.23Kerberos TGT issued for awhitmore from 10.4.12.23 (logon type 3)
InfoProcess Executionubuntu-web-01——execve: /usr/bin/python3 (uid=33 euid=33)
InfoCloud Api CallAWS CloudTraillgarcia10.4.12.35GetCallerIdentity by arn:aws:iam::4419:user/lgarcia succeeded
InfoProcess Executionubuntu-web-01——execve: /usr/bin/python3 (uid=33 euid=33)
InfoCloud Api CallAWS CloudTrailjmercier10.4.12.25GetCallerIdentity by arn:aws:iam::4419:user/jmercier succeeded
LowAuthentication FailureWIN-DC01jmercier10.4.12.41Pre-authentication failed for jmercier from 10.4.12.41 (status 0x18: bad password)
InfoAuthentication SuccessWIN-DC01bpatel10.4.12.37Kerberos TGT issued for bpatel from 10.4.12.37 (logon type 3)
InfoAuthentication SuccessWIN-DC01gsimmons10.4.12.21Kerberos TGT issued for gsimmons from 10.4.12.21 (logon type 3)
LowNetwork DenyPalo Alto Edge—10.4.12.28deny tcp 10.4.12.28:4583 -> 137.136.89.48:443 policy="egress-standard"
InfoNetwork AllowPalo Alto Edge—10.4.12.25allow tcp 10.4.12.25:28649 -> 31.149.13.221:443 policy="egress-standard"
InfoAuthentication SuccessWIN-DC01fokoye10.4.12.22Kerberos TGT issued for fokoye from 10.4.12.22 (logon type 3)
InfoAuthentication SuccessWIN-DC01kthompson10.4.12.43Kerberos TGT issued for kthompson from 10.4.12.43 (logon type 3)
InfoNetwork AllowPalo Alto Edge—10.4.12.25allow tcp 10.4.12.25:5423 -> 206.96.141.82:443 policy="egress-standard"
InfoAuthentication SuccessWIN-DC01bpatel10.4.12.21Kerberos TGT issued for bpatel from 10.4.12.21 (logon type 3)
InfoAuthentication SuccessWIN-DC01dnakamura10.4.12.36Kerberos TGT issued for dnakamura from 10.4.12.36 (logon type 3)
InfoProcess Executionubuntu-web-01——execve: /usr/bin/python3 (uid=33 euid=33)
InfoAuthentication SuccessWIN-DC01jmercier10.4.12.25Kerberos TGT issued for jmercier from 10.4.12.25 (logon type 3)
InfoProcess Executionubuntu-web-01——execve: /usr/bin/python3 (uid=33 euid=33)
InfoNetwork AllowPalo Alto Edge—10.4.12.40allow tcp 10.4.12.40:20876 -> 199.180.191.187:443 policy="egress-standard"
InfoAuthentication SuccessWIN-DC01jmercier10.4.12.34Kerberos TGT issued for jmercier from 10.4.12.34 (logon type 3)
LowAuthentication FailureWIN-DC01fokoye10.4.12.35Pre-authentication failed for fokoye from 10.4.12.35 (status 0x18: bad password)
InfoProcess Executionubuntu-web-01——execve: /usr/bin/sshd (uid=33 euid=33)
InfoProcess Executionubuntu-web-01——execve: /usr/bin/node (uid=33 euid=33)
InfoNetwork AllowPalo Alto Edge—10.4.12.27allow tcp 10.4.12.27:9541 -> 91.110.103.254:443 policy="egress-standard"
InfoNetwork AllowPalo Alto Edge—10.4.12.32allow tcp 10.4.12.32:14456 -> 79.19.119.52:443 policy="egress-standard"
InfoAuthentication SuccessWIN-DC01lgarcia10.4.12.26Kerberos TGT issued for lgarcia from 10.4.12.26 (logon type 3)
InfoAuthentication SuccessWIN-DC01ivanov10.4.12.41Kerberos TGT issued for ivanov from 10.4.12.41 (logon type 3)
InfoAuthentication SuccessWIN-DC01dnakamura10.4.12.34Kerberos TGT issued for dnakamura from 10.4.12.34 (logon type 3)
InfoNetwork AllowPalo Alto Edge—10.4.12.29allow tcp 10.4.12.29:34855 -> 136.197.11.149:443 policy="egress-standard"
InfoAuthentication SuccessWIN-DC01kthompson10.4.12.28Kerberos TGT issued for kthompson from 10.4.12.28 (logon type 3)
InfoNetwork AllowPalo Alto Edge—10.4.12.37allow tcp 10.4.12.37:10656 -> 144.165.160.5:443 policy="egress-standard"
InfoAuthentication SuccessWIN-DC01lgarcia10.4.12.39Kerberos TGT issued for lgarcia from 10.4.12.39 (logon type 3)
InfoProcess Executionubuntu-web-01——execve: /usr/bin/sshd (uid=33 euid=33)
InfoNetwork AllowPalo Alto Edge—10.4.12.29allow tcp 10.4.12.29:21959 -> 210.83.134.230:443 policy="egress-standard"
InfoAuthentication SuccessWIN-DC01jmercier10.4.12.27Kerberos TGT issued for jmercier from 10.4.12.27 (logon type 3)
InfoAuthentication SuccessWIN-DC01ekowalski10.4.12.33Kerberos TGT issued for ekowalski from 10.4.12.33 (logon type 3)
InfoAuthentication SuccessWIN-DC01ivanov10.4.12.27Kerberos TGT issued for ivanov from 10.4.12.27 (logon type 3)
InfoNetwork AllowPalo Alto Edge—10.4.12.21allow tcp 10.4.12.21:23724 -> 31.248.128.4:443 policy="egress-standard"
Page 14 of 26
PreviousNext