// Investigation

Hunt console

Structured search across the normalised event store. Terms combine with AND; prefix a value with ! to negate it.

hunt.queryREADY
Try

Result profile

41

events match

Severity

  • Critical0
  • High0
  • Medium1
  • Low0
  • Info40

Applied filters

  • host = WIN-FS02

Matches

Newest first.

Timestamp (UTC)SeverityEvent typeUserSource IPMessage
MediumAnomalous File Accesshlindqvist10.4.12.28Principal hlindqvist read 1,284 documents from \\WIN-FS02\Finance in 9 minutes (baseline: 14/day)
InfoFile Readhlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_040.xlsx
InfoFile Readhlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_039.xlsx
InfoFile Readhlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_038.xlsx
InfoFile Readhlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_037.xlsx
InfoFile Readhlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_036.xlsx
InfoFile Readhlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_035.xlsx
InfoFile Readhlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_034.xlsx
InfoFile Readhlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_033.xlsx
InfoFile Readhlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_032.xlsx
InfoFile Readhlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_031.xlsx
InfoFile Readhlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_030.xlsx
InfoFile Readhlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_029.xlsx
InfoFile Readhlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_028.xlsx
InfoFile Readhlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_027.xlsx
InfoFile Readhlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_026.xlsx
InfoFile Readhlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_025.xlsx
InfoFile Readhlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_024.xlsx
InfoFile Readhlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_023.xlsx
InfoFile Readhlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_022.xlsx
InfoFile Readhlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_021.xlsx
InfoFile Readhlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_020.xlsx
InfoFile Readhlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_019.xlsx
InfoFile Readhlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_018.xlsx
InfoFile Readhlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_017.xlsx
InfoFile Readhlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_016.xlsx
InfoFile Readhlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_015.xlsx
InfoFile Readhlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_014.xlsx
InfoFile Readhlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_013.xlsx
InfoFile Readhlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_012.xlsx
InfoFile Readhlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_011.xlsx
InfoFile Readhlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_010.xlsx
InfoFile Readhlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_009.xlsx
InfoFile Readhlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_008.xlsx
InfoFile Readhlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_007.xlsx
InfoFile Readhlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_006.xlsx
InfoFile Readhlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_005.xlsx
InfoFile Readhlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_004.xlsx
InfoFile Readhlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_003.xlsx
InfoFile Readhlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_002.xlsx
InfoFile Readhlindqvist10.4.12.28Read \\WIN-FS02\Finance\FY26\forecast_001.xlsx