Aegis
// Operations

Event stream

Normalised telemetry from every connected source, newest first. For field-level hunting across the full dataset, use the hunt console.

1.6kevents stored
Open hunt console

Telemetry

Showing 1441–1500 of 1.6k

Timestamp (UTC)SeverityEvent typeSourceUserSource IPMessage
InfoAuthentication SuccessWIN-DC01ekowalski10.4.12.39Kerberos TGT issued for ekowalski from 10.4.12.39 (logon type 3)
InfoAuthentication SuccessWIN-DC01ekowalski10.4.12.26Kerberos TGT issued for ekowalski from 10.4.12.26 (logon type 3)
LowNetwork DenyPalo Alto Edge—10.4.12.37deny tcp 10.4.12.37:28636 -> 22.26.68.158:443 policy="egress-standard"
InfoCloud Api CallAWS CloudTrailhlindqvist10.4.12.42ListBuckets by arn:aws:iam::4419:user/hlindqvist succeeded
InfoAuthentication SuccessWIN-DC01ekowalski10.4.12.34Kerberos TGT issued for ekowalski from 10.4.12.34 (logon type 3)
LowAuthentication FailureWIN-DC01jmercier10.4.12.25Pre-authentication failed for jmercier from 10.4.12.25 (status 0x18: bad password)
InfoNetwork AllowPalo Alto Edge—10.4.12.43allow tcp 10.4.12.43:21277 -> 56.138.243.11:443 policy="egress-standard"
InfoNetwork AllowPalo Alto Edge—10.4.12.38allow tcp 10.4.12.38:37728 -> 170.192.38.40:443 policy="egress-standard"
LowAuthentication FailureWIN-DC01cdiaz10.4.12.41Pre-authentication failed for cdiaz from 10.4.12.41 (status 0x18: bad password)
InfoNetwork AllowPalo Alto Edge—10.4.12.43allow tcp 10.4.12.43:37275 -> 154.154.148.193:443 policy="egress-standard"
InfoAuthentication SuccessWIN-DC01kthompson10.4.12.22Kerberos TGT issued for kthompson from 10.4.12.22 (logon type 3)
InfoAuthentication SuccessWIN-DC01ivanov10.4.12.38Kerberos TGT issued for ivanov from 10.4.12.38 (logon type 3)
InfoProcess Executionubuntu-web-01——execve: /usr/bin/sshd (uid=33 euid=33)
InfoAuthentication SuccessWIN-DC01lgarcia10.4.12.34Kerberos TGT issued for lgarcia from 10.4.12.34 (logon type 3)
LowAuthentication FailureWIN-DC01cdiaz10.4.12.21Pre-authentication failed for cdiaz from 10.4.12.21 (status 0x18: bad password)
InfoAuthentication SuccessWIN-DC01lgarcia10.4.12.32Kerberos TGT issued for lgarcia from 10.4.12.32 (logon type 3)
InfoAuthentication SuccessWIN-DC01jmercier10.4.12.43Kerberos TGT issued for jmercier from 10.4.12.43 (logon type 3)
InfoAuthentication SuccessWIN-DC01cdiaz10.4.12.36Kerberos TGT issued for cdiaz from 10.4.12.36 (logon type 3)
InfoAuthentication SuccessWIN-DC01ekowalski10.4.12.20Kerberos TGT issued for ekowalski from 10.4.12.20 (logon type 3)
InfoAuthentication SuccessWIN-DC01dnakamura10.4.12.22Kerberos TGT issued for dnakamura from 10.4.12.22 (logon type 3)
InfoProcess Executionubuntu-web-01——execve: /usr/bin/cron (uid=33 euid=33)
InfoAuthentication SuccessWIN-DC01gsimmons10.4.12.42Kerberos TGT issued for gsimmons from 10.4.12.42 (logon type 3)
InfoNetwork AllowPalo Alto Edge—10.4.12.22allow tcp 10.4.12.22:20967 -> 206.135.221.85:443 policy="egress-standard"
InfoAuthentication SuccessWIN-DC01awhitmore10.4.12.37Kerberos TGT issued for awhitmore from 10.4.12.37 (logon type 3)
InfoAuthentication SuccessWIN-DC01hlindqvist10.4.12.43Kerberos TGT issued for hlindqvist from 10.4.12.43 (logon type 3)
InfoAuthentication SuccessWIN-DC01gsimmons10.4.12.27Kerberos TGT issued for gsimmons from 10.4.12.27 (logon type 3)
LowNetwork DenyPalo Alto Edge—10.4.12.32deny tcp 10.4.12.32:33178 -> 40.133.0.92:443 policy="egress-standard"
LowAuthentication FailureWIN-DC01ivanov10.4.12.29Pre-authentication failed for ivanov from 10.4.12.29 (status 0x18: bad password)
InfoProcess Executionubuntu-web-01——execve: /usr/bin/systemd (uid=33 euid=33)
InfoCloud Api CallAWS CloudTrailbpatel10.4.12.39ListBuckets by arn:aws:iam::4419:user/bpatel succeeded
LowNetwork DenyPalo Alto Edge—10.4.12.26deny tcp 10.4.12.26:18861 -> 71.166.107.111:443 policy="egress-standard"
InfoAuthentication SuccessWIN-DC01jmercier10.4.12.39Kerberos TGT issued for jmercier from 10.4.12.39 (logon type 3)
LowAuthentication FailureWIN-DC01hlindqvist10.4.12.28Pre-authentication failed for hlindqvist from 10.4.12.28 (status 0x18: bad password)
LowAuthentication FailureWIN-DC01ivanov10.4.12.34Pre-authentication failed for ivanov from 10.4.12.34 (status 0x18: bad password)
InfoAuthentication SuccessWIN-DC01lgarcia10.4.12.35Kerberos TGT issued for lgarcia from 10.4.12.35 (logon type 3)
InfoAuthentication SuccessWIN-DC01lgarcia10.4.12.29Kerberos TGT issued for lgarcia from 10.4.12.29 (logon type 3)
InfoAuthentication SuccessWIN-DC01hlindqvist10.4.12.39Kerberos TGT issued for hlindqvist from 10.4.12.39 (logon type 3)
InfoProcess Executionubuntu-web-01——execve: /usr/bin/nginx (uid=33 euid=33)
InfoNetwork AllowPalo Alto Edge—10.4.12.31allow tcp 10.4.12.31:36969 -> 21.47.3.41:443 policy="egress-standard"
InfoNetwork AllowPalo Alto Edge—10.4.12.20allow tcp 10.4.12.20:5789 -> 73.94.64.152:443 policy="egress-standard"
InfoCloud Api CallAWS CloudTrailhlindqvist10.4.12.43GetCallerIdentity by arn:aws:iam::4419:user/hlindqvist succeeded
InfoCloud Api CallAWS CloudTraildnakamura10.4.12.30GetCallerIdentity by arn:aws:iam::4419:user/dnakamura succeeded
InfoNetwork AllowPalo Alto Edge—10.4.12.41allow tcp 10.4.12.41:2892 -> 137.239.62.117:443 policy="egress-standard"
InfoAuthentication SuccessWIN-DC01ivanov10.4.12.34Kerberos TGT issued for ivanov from 10.4.12.34 (logon type 3)
InfoAuthentication SuccessWIN-DC01awhitmore10.4.12.42Kerberos TGT issued for awhitmore from 10.4.12.42 (logon type 3)
InfoAuthentication SuccessWIN-DC01gsimmons10.4.12.22Kerberos TGT issued for gsimmons from 10.4.12.22 (logon type 3)
InfoNetwork AllowPalo Alto Edge—10.4.12.32allow tcp 10.4.12.32:15367 -> 159.149.42.171:443 policy="egress-standard"
InfoCloud Api CallAWS CloudTrailjmercier10.4.12.22DescribeSecurityGroups by arn:aws:iam::4419:user/jmercier succeeded
InfoAuthentication SuccessWIN-DC01dnakamura10.4.12.24Kerberos TGT issued for dnakamura from 10.4.12.24 (logon type 3)
InfoAuthentication SuccessWIN-DC01cdiaz10.4.12.32Kerberos TGT issued for cdiaz from 10.4.12.32 (logon type 3)
InfoNetwork AllowPalo Alto Edge—10.4.12.23allow tcp 10.4.12.23:13454 -> 41.104.246.125:443 policy="egress-standard"
InfoAuthentication SuccessWIN-DC01bpatel10.4.12.23Kerberos TGT issued for bpatel from 10.4.12.23 (logon type 3)
InfoAuthentication SuccessWIN-DC01hlindqvist10.4.12.42Kerberos TGT issued for hlindqvist from 10.4.12.42 (logon type 3)
InfoProcess Executionubuntu-web-01——execve: /usr/bin/node (uid=33 euid=33)
LowAuthentication FailureWIN-DC01awhitmore10.4.12.29Pre-authentication failed for awhitmore from 10.4.12.29 (status 0x18: bad password)
InfoNetwork AllowPalo Alto Edge—10.4.12.28allow tcp 10.4.12.28:27067 -> 190.208.224.1:443 policy="egress-standard"
InfoAuthentication SuccessWIN-DC01cdiaz10.4.12.24Kerberos TGT issued for cdiaz from 10.4.12.24 (logon type 3)
InfoAuthentication SuccessWIN-DC01bpatel10.4.12.28Kerberos TGT issued for bpatel from 10.4.12.28 (logon type 3)
InfoNetwork AllowPalo Alto Edge—10.4.12.43allow tcp 10.4.12.43:28087 -> 215.240.201.79:443 policy="egress-standard"
LowNetwork DenyPalo Alto Edge—10.4.12.30deny tcp 10.4.12.30:17164 -> 81.161.186.144:443 policy="egress-standard"
Page 25 of 26
PreviousNext