// Investigation
Hunt console
Structured search across the normalised event store. Terms combine with AND; prefix a value with ! to negate it.
hunt.queryREADY
to run
Result profile
81
events match
Severity
- Critical0
- High0
- Medium1
- Low13
- Info67
Applied filters
- user = bpatel
Matches
Newest first.
| Timestamp (UTC) | Severity | Event type | User | Source IP | Message |
|---|---|---|---|---|---|
| Info | Authentication Success | bpatel | 10.4.12.35 | Kerberos TGT issued for bpatel from 10.4.12.35 (logon type 3) | |
| Info | Authentication Success | bpatel | 10.4.12.37 | Kerberos TGT issued for bpatel from 10.4.12.37 (logon type 3) | |
| Low | Authentication Failure | bpatel | 10.4.12.34 | Pre-authentication failed for bpatel from 10.4.12.34 (status 0x18: bad password) | |
| Info | Authentication Success | bpatel | 10.4.12.30 | Kerberos TGT issued for bpatel from 10.4.12.30 (logon type 3) | |
| Info | Authentication Success | bpatel | 10.4.12.37 | Kerberos TGT issued for bpatel from 10.4.12.37 (logon type 3) | |
| Info | Authentication Success | bpatel | 10.4.12.37 | Kerberos TGT issued for bpatel from 10.4.12.37 (logon type 3) | |
| Info | Authentication Success | bpatel | 10.4.12.24 | Kerberos TGT issued for bpatel from 10.4.12.24 (logon type 3) | |
| Info | Authentication Success | bpatel | 10.4.12.42 | Kerberos TGT issued for bpatel from 10.4.12.42 (logon type 3) | |
| Info | Authentication Success | bpatel | 10.4.12.31 | Kerberos TGT issued for bpatel from 10.4.12.31 (logon type 3) | |
| Info | Authentication Success | bpatel | 10.4.12.39 | Kerberos TGT issued for bpatel from 10.4.12.39 (logon type 3) | |
| Info | Authentication Success | bpatel | 10.4.12.37 | Kerberos TGT issued for bpatel from 10.4.12.37 (logon type 3) | |
| Low | Authentication Failure | bpatel | 185.100.200.50 | Pre-authentication failed for bpatel from 185.100.200.50 (status 0x18: bad password) | |
| Low | Authentication Failure | bpatel | 185.100.200.50 | Pre-authentication failed for bpatel from 185.100.200.50 (status 0x18: bad password) | |
| Low | Authentication Failure | bpatel | 185.100.200.50 | Pre-authentication failed for bpatel from 185.100.200.50 (status 0x18: bad password) | |
| Low | Authentication Failure | bpatel | 185.100.200.50 | Pre-authentication failed for bpatel from 185.100.200.50 (status 0x18: bad password) | |
| Info | Authentication Success | bpatel | 10.4.12.24 | Kerberos TGT issued for bpatel from 10.4.12.24 (logon type 3) | |
| Info | Authentication Success | bpatel | 10.4.12.39 | Kerberos TGT issued for bpatel from 10.4.12.39 (logon type 3) | |
| Info | Authentication Success | bpatel | 10.4.12.34 | Kerberos TGT issued for bpatel from 10.4.12.34 (logon type 3) | |
| Medium | Createaccesskey | bpatel | 10.4.12.22 | CreateAccessKey by arn:aws:iam::4419:user/bpatel created AKIA43XKQ2NREXAMPLE for user svc_deploy | |
| Low | Authentication Failure | bpatel | 10.4.12.32 | Pre-authentication failed for bpatel from 10.4.12.32 (status 0x18: bad password) | |
| Info | Cloud Api Call | bpatel | 10.4.12.25 | GetCallerIdentity by arn:aws:iam::4419:user/bpatel succeeded | |
| Info | Cloud Api Call | bpatel | 10.4.12.32 | DescribeSecurityGroups by arn:aws:iam::4419:user/bpatel succeeded | |
| Info | Authentication Success | bpatel | 10.4.12.27 | Kerberos TGT issued for bpatel from 10.4.12.27 (logon type 3) | |
| Info | Authentication Success | bpatel | 10.4.12.39 | Kerberos TGT issued for bpatel from 10.4.12.39 (logon type 3) | |
| Info | Authentication Success | bpatel | 10.4.12.43 | Kerberos TGT issued for bpatel from 10.4.12.43 (logon type 3) | |
| Info | Cloud Api Call | bpatel | 10.4.12.40 | DescribeInstances by arn:aws:iam::4419:user/bpatel succeeded | |
| Info | Authentication Success | bpatel | 10.4.12.41 | Kerberos TGT issued for bpatel from 10.4.12.41 (logon type 3) | |
| Info | Authentication Success | bpatel | 10.4.12.30 | Kerberos TGT issued for bpatel from 10.4.12.30 (logon type 3) | |
| Low | Authentication Failure | bpatel | 10.4.12.34 | Pre-authentication failed for bpatel from 10.4.12.34 (status 0x18: bad password) | |
| Info | Authentication Success | bpatel | 10.4.12.21 | Kerberos TGT issued for bpatel from 10.4.12.21 (logon type 3) | |
| Info | Cloud Api Call | bpatel | 10.4.12.32 | ListBuckets by arn:aws:iam::4419:user/bpatel succeeded | |
| Low | Authentication Failure | bpatel | 10.4.12.41 | Pre-authentication failed for bpatel from 10.4.12.41 (status 0x18: bad password) | |
| Info | Authentication Success | bpatel | 10.4.12.25 | Kerberos TGT issued for bpatel from 10.4.12.25 (logon type 3) | |
| Info | Authentication Success | bpatel | 10.4.12.28 | Kerberos TGT issued for bpatel from 10.4.12.28 (logon type 3) | |
| Info | Cloud Api Call | bpatel | 10.4.12.33 | DescribeInstances by arn:aws:iam::4419:user/bpatel succeeded | |
| Info | Authentication Success | bpatel | 10.4.12.30 | Kerberos TGT issued for bpatel from 10.4.12.30 (logon type 3) | |
| Info | Authentication Success | bpatel | 10.4.12.27 | Kerberos TGT issued for bpatel from 10.4.12.27 (logon type 3) | |
| Info | Authentication Success | bpatel | 10.4.12.29 | Kerberos TGT issued for bpatel from 10.4.12.29 (logon type 3) | |
| Info | Authentication Success | bpatel | 10.4.12.35 | Kerberos TGT issued for bpatel from 10.4.12.35 (logon type 3) | |
| Info | Cloud Api Call | bpatel | 10.4.12.39 | DescribeInstances by arn:aws:iam::4419:user/bpatel succeeded | |
| Info | Authentication Success | bpatel | 10.4.12.40 | Kerberos TGT issued for bpatel from 10.4.12.40 (logon type 3) | |
| Info | Authentication Success | bpatel | 10.4.12.21 | Kerberos TGT issued for bpatel from 10.4.12.21 (logon type 3) | |
| Info | Cloud Api Call | bpatel | 10.4.12.28 | DescribeSecurityGroups by arn:aws:iam::4419:user/bpatel succeeded | |
| Info | Authentication Success | bpatel | 10.4.12.24 | Kerberos TGT issued for bpatel from 10.4.12.24 (logon type 3) | |
| Info | Authentication Success | bpatel | 10.4.12.27 | Kerberos TGT issued for bpatel from 10.4.12.27 (logon type 3) | |
| Info | Authentication Success | bpatel | 10.4.12.20 | Kerberos TGT issued for bpatel from 10.4.12.20 (logon type 3) | |
| Info | Authentication Success | bpatel | 10.4.12.26 | Kerberos TGT issued for bpatel from 10.4.12.26 (logon type 3) | |
| Info | Authentication Success | bpatel | 10.4.12.37 | Kerberos TGT issued for bpatel from 10.4.12.37 (logon type 3) | |
| Info | Authentication Success | bpatel | 10.4.12.38 | Kerberos TGT issued for bpatel from 10.4.12.38 (logon type 3) | |
| Info | Authentication Success | bpatel | 10.4.12.21 | Kerberos TGT issued for bpatel from 10.4.12.21 (logon type 3) | |
| Info | Authentication Success | bpatel | 10.4.12.37 | Kerberos TGT issued for bpatel from 10.4.12.37 (logon type 3) | |
| Info | Authentication Success | bpatel | 10.4.12.21 | Kerberos TGT issued for bpatel from 10.4.12.21 (logon type 3) | |
| Info | Cloud Api Call | bpatel | 10.4.12.34 | DescribeSecurityGroups by arn:aws:iam::4419:user/bpatel succeeded | |
| Info | Authentication Success | bpatel | 10.4.12.28 | Kerberos TGT issued for bpatel from 10.4.12.28 (logon type 3) | |
| Info | Authentication Success | bpatel | 10.4.12.31 | Kerberos TGT issued for bpatel from 10.4.12.31 (logon type 3) | |
| Info | Authentication Success | bpatel | 10.4.12.37 | Kerberos TGT issued for bpatel from 10.4.12.37 (logon type 3) | |
| Info | Authentication Success | bpatel | 10.4.12.43 | Kerberos TGT issued for bpatel from 10.4.12.43 (logon type 3) | |
| Info | Authentication Success | bpatel | 10.4.12.30 | Kerberos TGT issued for bpatel from 10.4.12.30 (logon type 3) | |
| Low | Authentication Failure | bpatel | 10.4.12.37 | Pre-authentication failed for bpatel from 10.4.12.37 (status 0x18: bad password) | |
| Info | Cloud Api Call | bpatel | 10.4.12.28 | GetCallerIdentity by arn:aws:iam::4419:user/bpatel succeeded | |
| Info | Cloud Api Call | bpatel | 10.4.12.26 | ListBuckets by arn:aws:iam::4419:user/bpatel succeeded | |
| Info | Cloud Api Call | bpatel | 10.4.12.24 | GetCallerIdentity by arn:aws:iam::4419:user/bpatel succeeded | |
| Info | Cloud Api Call | bpatel | 10.4.12.43 | ListBuckets by arn:aws:iam::4419:user/bpatel succeeded | |
| Low | Authentication Failure | bpatel | 10.4.12.28 | Pre-authentication failed for bpatel from 10.4.12.28 (status 0x18: bad password) | |
| Info | Cloud Api Call | bpatel | 10.4.12.21 | DescribeSecurityGroups by arn:aws:iam::4419:user/bpatel succeeded | |
| Info | Cloud Api Call | bpatel | 10.4.12.42 | ListBuckets by arn:aws:iam::4419:user/bpatel succeeded | |
| Info | Cloud Api Call | bpatel | 10.4.12.41 | DescribeSecurityGroups by arn:aws:iam::4419:user/bpatel succeeded | |
| Info | Authentication Success | bpatel | 10.4.12.27 | Kerberos TGT issued for bpatel from 10.4.12.27 (logon type 3) | |
| Low | Authentication Failure | bpatel | 10.4.12.38 | Pre-authentication failed for bpatel from 10.4.12.38 (status 0x18: bad password) | |
| Info | Cloud Api Call | bpatel | 10.4.12.38 | DescribeSecurityGroups by arn:aws:iam::4419:user/bpatel succeeded | |
| Info | Authentication Success | bpatel | 10.4.12.28 | Kerberos TGT issued for bpatel from 10.4.12.28 (logon type 3) | |
| Info | Authentication Success | bpatel | 10.4.12.37 | Kerberos TGT issued for bpatel from 10.4.12.37 (logon type 3) | |
| Low | Authentication Failure | bpatel | 10.4.12.27 | Pre-authentication failed for bpatel from 10.4.12.27 (status 0x18: bad password) | |
| Low | Authentication Failure | bpatel | 10.4.12.36 | Pre-authentication failed for bpatel from 10.4.12.36 (status 0x18: bad password) | |
| Info | Authentication Success | bpatel | 10.4.12.41 | Kerberos TGT issued for bpatel from 10.4.12.41 (logon type 3) | |
| Info | Cloud Api Call | bpatel | 10.4.12.39 | ListBuckets by arn:aws:iam::4419:user/bpatel succeeded | |
| Info | Authentication Success | bpatel | 10.4.12.23 | Kerberos TGT issued for bpatel from 10.4.12.23 (logon type 3) | |
| Info | Authentication Success | bpatel | 10.4.12.28 | Kerberos TGT issued for bpatel from 10.4.12.28 (logon type 3) | |
| Info | Authentication Success | bpatel | 10.4.12.20 | Kerberos TGT issued for bpatel from 10.4.12.20 (logon type 3) | |
| Info | Authentication Success | bpatel | 10.4.12.23 | Kerberos TGT issued for bpatel from 10.4.12.23 (logon type 3) | |
| Info | Authentication Success | bpatel | 10.4.12.31 | Kerberos TGT issued for bpatel from 10.4.12.31 (logon type 3) |