// Operations

Event stream

Normalised telemetry from every connected source, newest first. For field-level hunting across the full dataset, use the hunt console.

1.6kevents stored

Open hunt console

Telemetry

Showing 241–300 of 1.6k

Timestamp (UTC)	Severity	Event type	Source	User	Source IP	Message
2026-09-04 14:21:05Z	Low	Authentication Failure	WIN-DC01	jsmith	185.100.200.50	Pre-authentication failed for jsmith from 185.100.200.50 (status 0x18: bad password)
2026-09-04 14:20:53Z	Low	Authentication Failure	WIN-DC01	lgarcia	185.100.200.50	Pre-authentication failed for lgarcia from 185.100.200.50 (status 0x18: bad password)
2026-09-04 14:20:41Z	Low	Authentication Failure	WIN-DC01	kthompson	185.100.200.50	Pre-authentication failed for kthompson from 185.100.200.50 (status 0x18: bad password)
2026-09-04 14:20:29Z	Low	Authentication Failure	WIN-DC01	jmercier	185.100.200.50	Pre-authentication failed for jmercier from 185.100.200.50 (status 0x18: bad password)
2026-09-04 14:20:17Z	Low	Authentication Failure	WIN-DC01	ivanov	185.100.200.50	Pre-authentication failed for ivanov from 185.100.200.50 (status 0x18: bad password)
2026-09-04 14:20:05Z	Low	Authentication Failure	WIN-DC01	hlindqvist	185.100.200.50	Pre-authentication failed for hlindqvist from 185.100.200.50 (status 0x18: bad password)
2026-09-04 14:19:53Z	Low	Authentication Failure	WIN-DC01	gsimmons	185.100.200.50	Pre-authentication failed for gsimmons from 185.100.200.50 (status 0x18: bad password)
2026-09-04 14:19:41Z	Low	Authentication Failure	WIN-DC01	fokoye	185.100.200.50	Pre-authentication failed for fokoye from 185.100.200.50 (status 0x18: bad password)
2026-09-04 14:19:29Z	Low	Authentication Failure	WIN-DC01	ekowalski	185.100.200.50	Pre-authentication failed for ekowalski from 185.100.200.50 (status 0x18: bad password)
2026-09-04 14:19:28Z	Info	Network Allow	Palo Alto Edge	—	10.4.12.35	allow tcp 10.4.12.35:9032 -> 36.11.134.165:443 policy="egress-standard"
2026-09-04 14:19:20Z	Info	Authentication Success	WIN-DC01	cdiaz	10.4.12.42	Kerberos TGT issued for cdiaz from 10.4.12.42 (logon type 3)
2026-09-04 14:19:18Z	Info	Authentication Success	WIN-DC01	jmercier	10.4.12.22	Kerberos TGT issued for jmercier from 10.4.12.22 (logon type 3)
2026-09-04 14:19:17Z	Low	Authentication Failure	WIN-DC01	dnakamura	185.100.200.50	Pre-authentication failed for dnakamura from 185.100.200.50 (status 0x18: bad password)
2026-09-04 14:19:05Z	Low	Authentication Failure	WIN-DC01	cdiaz	185.100.200.50	Pre-authentication failed for cdiaz from 185.100.200.50 (status 0x18: bad password)
2026-09-04 14:18:53Z	Low	Authentication Failure	WIN-DC01	bpatel	185.100.200.50	Pre-authentication failed for bpatel from 185.100.200.50 (status 0x18: bad password)
2026-09-04 14:18:41Z	Low	Authentication Failure	WIN-DC01	awhitmore	185.100.200.50	Pre-authentication failed for awhitmore from 185.100.200.50 (status 0x18: bad password)
2026-09-04 14:18:39Z	Info	Authentication Success	WIN-DC01	jmercier	10.4.12.36	Kerberos TGT issued for jmercier from 10.4.12.36 (logon type 3)
2026-09-04 14:18:29Z	Low	Authentication Failure	WIN-DC01	administrator	185.100.200.50	Pre-authentication failed for administrator from 185.100.200.50 (status 0x18: bad password)
2026-09-04 14:18:17Z	Low	Authentication Failure	WIN-DC01	svc_sql	185.100.200.50	Pre-authentication failed for svc_sql from 185.100.200.50 (status 0x18: bad password)
2026-09-04 14:18:05Z	Low	Authentication Failure	WIN-DC01	svc_backup	185.100.200.50	Pre-authentication failed for svc_backup from 185.100.200.50 (status 0x18: bad password)
2026-09-04 14:17:53Z	Low	Authentication Failure	WIN-DC01	jsmith	185.100.200.50	Pre-authentication failed for jsmith from 185.100.200.50 (status 0x18: bad password)
2026-09-04 14:17:41Z	Low	Authentication Failure	WIN-DC01	lgarcia	185.100.200.50	Pre-authentication failed for lgarcia from 185.100.200.50 (status 0x18: bad password)
2026-09-04 14:17:29Z	Low	Authentication Failure	WIN-DC01	kthompson	185.100.200.50	Pre-authentication failed for kthompson from 185.100.200.50 (status 0x18: bad password)
2026-09-04 14:17:17Z	Low	Authentication Failure	WIN-DC01	jmercier	185.100.200.50	Pre-authentication failed for jmercier from 185.100.200.50 (status 0x18: bad password)
2026-09-04 14:17:05Z	Low	Authentication Failure	WIN-DC01	ivanov	185.100.200.50	Pre-authentication failed for ivanov from 185.100.200.50 (status 0x18: bad password)
2026-09-04 14:16:53Z	Low	Authentication Failure	WIN-DC01	hlindqvist	185.100.200.50	Pre-authentication failed for hlindqvist from 185.100.200.50 (status 0x18: bad password)
2026-09-04 14:16:41Z	Low	Authentication Failure	WIN-DC01	gsimmons	185.100.200.50	Pre-authentication failed for gsimmons from 185.100.200.50 (status 0x18: bad password)
2026-09-04 14:16:29Z	Low	Authentication Failure	WIN-DC01	fokoye	185.100.200.50	Pre-authentication failed for fokoye from 185.100.200.50 (status 0x18: bad password)
2026-09-04 14:16:17Z	Low	Authentication Failure	WIN-DC01	ekowalski	185.100.200.50	Pre-authentication failed for ekowalski from 185.100.200.50 (status 0x18: bad password)
2026-09-04 14:16:05Z	Low	Authentication Failure	WIN-DC01	dnakamura	185.100.200.50	Pre-authentication failed for dnakamura from 185.100.200.50 (status 0x18: bad password)
2026-09-04 14:15:53Z	Info	Authentication Success	WIN-DC01	dnakamura	10.4.12.43	Kerberos TGT issued for dnakamura from 10.4.12.43 (logon type 3)
2026-09-04 14:15:53Z	Low	Authentication Failure	WIN-DC01	cdiaz	185.100.200.50	Pre-authentication failed for cdiaz from 185.100.200.50 (status 0x18: bad password)
2026-09-04 14:15:41Z	Low	Authentication Failure	WIN-DC01	bpatel	185.100.200.50	Pre-authentication failed for bpatel from 185.100.200.50 (status 0x18: bad password)
2026-09-04 14:15:29Z	Low	Authentication Failure	WIN-DC01	awhitmore	185.100.200.50	Pre-authentication failed for awhitmore from 185.100.200.50 (status 0x18: bad password)
2026-09-04 14:15:02Z	Info	Network Allow	Palo Alto Edge	—	10.4.12.21	allow tcp 10.4.12.21:38142 -> 22.34.89.214:443 policy="egress-standard"
2026-09-04 14:14:04Z	Info	Network Allow	Palo Alto Edge	—	10.4.12.27	allow tcp 10.4.12.27:22798 -> 153.11.227.158:443 policy="egress-standard"
2026-09-04 14:13:07Z	Info	Authentication Success	WIN-DC01	awhitmore	10.4.12.31	Kerberos TGT issued for awhitmore from 10.4.12.31 (logon type 3)
2026-09-04 14:12:30Z	Info	Authentication Success	WIN-DC01	kthompson	10.4.12.41	Kerberos TGT issued for kthompson from 10.4.12.41 (logon type 3)
2026-09-04 14:11:30Z	Low	Network Deny	Palo Alto Edge	—	10.4.12.33	deny tcp 10.4.12.33:18534 -> 213.172.194.46:443 policy="egress-standard"
2026-09-04 14:11:22Z	Low	Network Deny	Palo Alto Edge	—	10.4.12.32	deny tcp 10.4.12.32:28318 -> 67.197.72.192:443 policy="egress-standard"
2026-09-04 14:06:58Z	Info	Process Execution	ubuntu-web-01	—	—	execve: /usr/bin/python3 (uid=33 euid=33)
2026-09-04 14:05:26Z	Info	Process Execution	ubuntu-web-01	—	—	execve: /usr/bin/python3 (uid=33 euid=33)
2026-09-04 14:04:00Z	Info	Authentication Success	WIN-DC01	dnakamura	10.4.12.37	Kerberos TGT issued for dnakamura from 10.4.12.37 (logon type 3)
2026-09-04 14:01:58Z	Info	Authentication Success	WIN-DC01	lgarcia	10.4.12.38	Kerberos TGT issued for lgarcia from 10.4.12.38 (logon type 3)
2026-09-04 14:01:48Z	Info	Process Execution	ubuntu-web-01	—	—	execve: /usr/bin/node (uid=33 euid=33)
2026-09-04 13:59:47Z	Info	Authentication Success	WIN-DC01	cdiaz	10.4.12.32	Kerberos TGT issued for cdiaz from 10.4.12.32 (logon type 3)
2026-09-04 13:58:22Z	Info	Process Execution	ubuntu-web-01	—	—	execve: /usr/bin/systemd (uid=33 euid=33)
2026-09-04 13:54:24Z	Info	Authentication Success	WIN-DC01	dnakamura	10.4.12.21	Kerberos TGT issued for dnakamura from 10.4.12.21 (logon type 3)
2026-09-04 13:50:33Z	Info	Authentication Success	WIN-DC01	gsimmons	10.4.12.39	Kerberos TGT issued for gsimmons from 10.4.12.39 (logon type 3)
2026-09-04 13:49:19Z	Info	Cloud Api Call	AWS CloudTrail	gsimmons	10.4.12.27	ListBuckets by arn:aws:iam::4419:user/gsimmons succeeded
2026-09-04 13:45:55Z	Info	Cloud Api Call	AWS CloudTrail	awhitmore	10.4.12.43	GetCallerIdentity by arn:aws:iam::4419:user/awhitmore succeeded
2026-09-04 13:45:51Z	Info	Authentication Success	WIN-DC01	gsimmons	10.4.12.35	Kerberos TGT issued for gsimmons from 10.4.12.35 (logon type 3)
2026-09-04 13:45:47Z	Info	Authentication Success	WIN-DC01	lgarcia	10.4.12.23	Kerberos TGT issued for lgarcia from 10.4.12.23 (logon type 3)
2026-09-04 13:44:26Z	Info	Authentication Success	WIN-DC01	ekowalski	10.4.12.24	Kerberos TGT issued for ekowalski from 10.4.12.24 (logon type 3)
2026-09-04 13:42:41Z	Info	Authentication Success	WIN-DC01	hlindqvist	10.4.12.38	Kerberos TGT issued for hlindqvist from 10.4.12.38 (logon type 3)
2026-09-04 13:39:41Z	Info	Process Execution	ubuntu-web-01	—	—	execve: /usr/bin/sshd (uid=33 euid=33)
2026-09-04 13:38:43Z	Info	Process Execution	ubuntu-web-01	—	—	execve: /usr/bin/python3 (uid=33 euid=33)
2026-09-04 13:38:41Z	Info	Authentication Success	WIN-DC01	bpatel	10.4.12.24	Kerberos TGT issued for bpatel from 10.4.12.24 (logon type 3)
2026-09-04 13:37:43Z	Low	Network Deny	Palo Alto Edge	—	10.4.12.42	deny tcp 10.4.12.42:9875 -> 153.81.158.72:443 policy="egress-standard"
2026-09-04 13:31:13Z	Info	Authentication Success	WIN-DC01	dnakamura	10.4.12.30	Kerberos TGT issued for dnakamura from 10.4.12.30 (logon type 3)

Page 5 of 26

Previous Next