Aegis
// Operations

Event stream

Normalised telemetry from every connected source, newest first. For field-level hunting across the full dataset, use the hunt console.

1.6kevents stored
Open hunt console

Telemetry

Showing 1021–1080 of 1.6k

Timestamp (UTC)SeverityEvent typeSourceUserSource IPMessage
InfoFile ReadWIN-FS02hlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_040.xlsx
InfoFile ReadWIN-FS02hlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_039.xlsx
InfoFile ReadWIN-FS02hlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_038.xlsx
InfoFile ReadWIN-FS02hlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_037.xlsx
InfoFile ReadWIN-FS02hlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_036.xlsx
InfoFile ReadWIN-FS02hlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_035.xlsx
InfoFile ReadWIN-FS02hlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_034.xlsx
InfoNetwork AllowPalo Alto Edge—10.4.12.40allow tcp 10.4.12.40:29923 -> 196.85.48.186:443 policy="egress-standard"
InfoAuthentication SuccessWIN-DC01lgarcia10.4.12.36Kerberos TGT issued for lgarcia from 10.4.12.36 (logon type 3)
InfoFile ReadWIN-FS02hlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_033.xlsx
InfoNetwork AllowPalo Alto Edge—10.4.12.25allow tcp 10.4.12.25:23907 -> 135.90.251.204:443 policy="egress-standard"
InfoFile ReadWIN-FS02hlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_032.xlsx
InfoFile ReadWIN-FS02hlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_031.xlsx
InfoNetwork AllowPalo Alto Edge—10.4.12.40allow tcp 10.4.12.40:37413 -> 202.83.29.116:443 policy="egress-standard"
InfoFile ReadWIN-FS02hlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_030.xlsx
InfoFile ReadWIN-FS02hlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_029.xlsx
InfoFile ReadWIN-FS02hlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_028.xlsx
InfoFile ReadWIN-FS02hlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_027.xlsx
InfoFile ReadWIN-FS02hlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_026.xlsx
InfoFile ReadWIN-FS02hlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_025.xlsx
InfoFile ReadWIN-FS02hlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_024.xlsx
InfoFile ReadWIN-FS02hlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_023.xlsx
InfoFile ReadWIN-FS02hlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_022.xlsx
InfoFile ReadWIN-FS02hlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_021.xlsx
InfoFile ReadWIN-FS02hlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_020.xlsx
InfoFile ReadWIN-FS02hlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_019.xlsx
InfoFile ReadWIN-FS02hlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_018.xlsx
InfoFile ReadWIN-FS02hlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_017.xlsx
InfoFile ReadWIN-FS02hlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_016.xlsx
InfoFile ReadWIN-FS02hlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_015.xlsx
InfoFile ReadWIN-FS02hlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_014.xlsx
InfoFile ReadWIN-FS02hlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_013.xlsx
InfoFile ReadWIN-FS02hlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_012.xlsx
InfoAuthentication SuccessWIN-DC01ekowalski10.4.12.20Kerberos TGT issued for ekowalski from 10.4.12.20 (logon type 3)
InfoFile ReadWIN-FS02hlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_011.xlsx
InfoFile ReadWIN-FS02hlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_010.xlsx
InfoFile ReadWIN-FS02hlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_009.xlsx
InfoFile ReadWIN-FS02hlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_008.xlsx
InfoFile ReadWIN-FS02hlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_007.xlsx
InfoFile ReadWIN-FS02hlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_006.xlsx
InfoAuthentication SuccessWIN-DC01jmercier10.4.12.20Kerberos TGT issued for jmercier from 10.4.12.20 (logon type 3)
InfoFile ReadWIN-FS02hlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_005.xlsx
InfoFile ReadWIN-FS02hlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_004.xlsx
InfoFile ReadWIN-FS02hlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_003.xlsx
InfoFile ReadWIN-FS02hlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_002.xlsx
InfoFile ReadWIN-FS02hlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_001.xlsx
InfoAuthentication SuccessWIN-DC01cdiaz10.4.12.21Kerberos TGT issued for cdiaz from 10.4.12.21 (logon type 3)
InfoCloud Api CallAWS CloudTrailjmercier10.4.12.30GetCallerIdentity by arn:aws:iam::4419:user/jmercier succeeded
InfoProcess Executionubuntu-web-01——execve: /usr/bin/systemd (uid=33 euid=33)
InfoProcess Executionubuntu-web-01——execve: /usr/bin/python3 (uid=33 euid=33)
InfoAuthentication SuccessWIN-DC01gsimmons10.4.12.42Kerberos TGT issued for gsimmons from 10.4.12.42 (logon type 3)
InfoProcess Executionubuntu-web-01——execve: /usr/bin/systemd (uid=33 euid=33)
InfoAuthentication SuccessWIN-DC01fokoye10.4.12.23Kerberos TGT issued for fokoye from 10.4.12.23 (logon type 3)
InfoAuthentication SuccessWIN-DC01fokoye10.4.12.24Kerberos TGT issued for fokoye from 10.4.12.24 (logon type 3)
InfoNetwork AllowPalo Alto Edge—10.4.12.30allow tcp 10.4.12.30:16588 -> 42.30.210.135:443 policy="egress-standard"
InfoProcess Executionubuntu-web-01——execve: /usr/bin/cron (uid=33 euid=33)
InfoProcess Executionubuntu-web-01——execve: /usr/bin/node (uid=33 euid=33)
LowAuthentication FailureWIN-DC01kthompson10.4.12.41Pre-authentication failed for kthompson from 10.4.12.41 (status 0x18: bad password)
InfoProcess Executionubuntu-web-01——execve: /usr/bin/sshd (uid=33 euid=33)
InfoCloud Api CallAWS CloudTrailfokoye10.4.12.43DescribeInstances by arn:aws:iam::4419:user/fokoye succeeded
Page 18 of 26
PreviousNext