{ "accounts": [ { "id": 1, "first_name": "Ryder", "last_name": "Macejkovic", "user_principal_name": "ryder_macejkovic@example.org", "account_type": "standard_user", "department": "Engineering" }, { "id": 2, "first_name": "Kara", "last_name": "Thompson", "user_principal_name": "kara.thompson@example.com", "account_type": "standard_user", "department": "Engineering" }, { "id": 3, "first_name": "Israel", "last_name": "Reynolds", "user_principal_name": "israel_reynolds92@example.org", "account_type": "standard_user", "department": "Finance" }, { "id": 4, "first_name": "Renee", "last_name": "Schinner", "user_principal_name": "renee.schinner@example.org", "account_type": "standard_user", "department": "IT" }, { "id": 5, "first_name": "Glen", "last_name": "Leffler", "user_principal_name": "glen_leffler@example.org", "account_type": "standard_user", "department": "Finance" }, { "id": 6, "first_name": "Stephanie", "last_name": "Kilback", "user_principal_name": "stephanie_kilback@example.com", "account_type": "standard_user", "department": "Engineering" }, { "id": 7, "first_name": "Euna", "last_name": "Lynch-Rutherford", "user_principal_name": "euna.lynch-rutherford@example.org", "account_type": "standard_user", "department": "Sales" }, { "id": 8, "first_name": "Ciara", "last_name": "Kuphal", "user_principal_name": "ciara.kuphal36@example.org", "account_type": "standard_user", "department": "Sales" }, { "id": 9, "first_name": "Chadd", "last_name": "Lockman", "user_principal_name": "chadd.lockman@example.net", "account_type": "standard_user", "department": "Finance" }, { "id": 10, "first_name": "Providenci", "last_name": "Haag", "user_principal_name": "providenci.haag75@example.net", "account_type": "standard_user", "department": "Operations" }, { "id": 11, "first_name": "Curt", "last_name": "Sporer", "user_principal_name": "curt.sporer@example.org", "account_type": "standard_user", "department": "HR" }, { "id": 12, "first_name": "Duncan", "last_name": "Reinger", "user_principal_name": "duncan_reinger82@example.com", "account_type": "standard_user", "department": "IT" }, { "id": 13, "first_name": "Sofia", "last_name": "Bauch", "user_principal_name": "sofia.bauch83@example.com", "account_type": "privileged_user", "department": "Finance" }, { "id": 14, "first_name": "Mossie", "last_name": "Stanton", "user_principal_name": "mossie_stanton@example.com", "account_type": "standard_user", "department": "Sales" }, { "id": 15, "first_name": "Carole", "last_name": "Rice", "user_principal_name": "carole_rice@example.net", "account_type": "standard_user", "department": "Engineering" }, { "id": 16, "first_name": "Camden", "last_name": "Kozey", "user_principal_name": "camden_kozey@example.com", "account_type": "standard_user", "department": "Operations" }, { "id": 17, "first_name": "Malachi", "last_name": "Durgan", "user_principal_name": "malachi.durgan96@example.com", "account_type": "standard_user", "department": "Sales" }, { "id": 18, "first_name": "Anissa", "last_name": "Wisozk", "user_principal_name": "anissa_wisozk@example.org", "account_type": "standard_user", "department": "Engineering" }, { "id": 19, "first_name": "Alfredo", "last_name": "Walter-Price", "user_principal_name": "alfredo_walter-price@example.org", "account_type": "privileged_user", "department": "Finance" }, { "id": 20, "first_name": "Dillon", "last_name": "Effertz", "user_principal_name": "dillon.effertz@example.net", "account_type": "standard_user", "department": "IT" }, { "id": 21, "first_name": "Amara", "last_name": "Dach", "user_principal_name": "amara.dach@example.net", "account_type": "standard_user", "department": "IT" }, { "id": 22, "first_name": "Trycia", "last_name": "Gislason", "user_principal_name": "trycia.gislason88@example.org", "account_type": "standard_user", "department": "Sales" }, { "id": 23, "first_name": "Sharon", "last_name": "Hackett", "user_principal_name": "sharon_hackett72@example.net", "account_type": "standard_user", "department": "Sales" }, { "id": 24, "first_name": "Demond", "last_name": "Morissette", "user_principal_name": "demond_morissette@example.net", "account_type": "standard_user", "department": "HR" }, { "id": 25, "first_name": "Lina", "last_name": "Conn", "user_principal_name": "lina.conn83@example.org", "account_type": "standard_user", "department": "Operations" }, { "id": 26, "first_name": "Dewitt", "last_name": "Parisian", "user_principal_name": "dewitt.parisian61@example.org", "account_type": "privileged_user", "department": "IT" }, { "id": 27, "first_name": "Maybelle", "last_name": "Balistreri", "user_principal_name": "maybelle.balistreri@example.net", "account_type": "standard_user", "department": "Sales" }, { "id": 28, "first_name": "Elisa", "last_name": "Kiehn", "user_principal_name": "elisa_kiehn36@example.net", "account_type": "standard_user", "department": "Finance" }, { "id": 29, "first_name": "Hilton", "last_name": "Hermiston", "user_principal_name": "hilton.hermiston@example.net", "account_type": "standard_user", "department": "Engineering" }, { "id": 30, "first_name": "Norma", "last_name": "DuBuque", "user_principal_name": "norma.dubuque27@example.com", "account_type": "standard_user", "department": "Operations" }, { "id": 31, "first_name": "Amira", "last_name": "Schamberger", "user_principal_name": "amira.schamberger64@example.net", "account_type": "standard_user", "department": "Sales" }, { "id": 32, "first_name": "Lula", "last_name": "Pagac-Hayes", "user_principal_name": "lula_pagac-hayes@example.org", "account_type": "standard_user", "department": "Sales" }, { "id": 33, "first_name": "Donavon", "last_name": "Brakus", "user_principal_name": "donavon.brakus56@example.com", "account_type": "standard_user", "department": "Sales" }, { "id": 34, "first_name": "Colton", "last_name": "Krajcik", "user_principal_name": "colton_krajcik@example.net", "account_type": "standard_user", "department": "Finance" }, { "id": 35, "first_name": "Pauline", "last_name": "Hagenes", "user_principal_name": "pauline_hagenes@example.org", "account_type": "standard_user", "department": "Sales" }, { "id": 36, "first_name": "Brenden", "last_name": "Volkman", "user_principal_name": "brenden_volkman@example.org", "account_type": "standard_user", "department": "HR" }, { "id": 37, "first_name": "Herta", "last_name": "Reichel", "user_principal_name": "herta_reichel15@example.net", "account_type": "standard_user", "department": "Finance" }, { "id": 38, "first_name": "Solon", "last_name": "Abbott", "user_principal_name": "solon_abbott@example.com", "account_type": "standard_user", "department": "Finance" }, { "id": 39, "first_name": "Addie", "last_name": "Rice", "user_principal_name": "addie_rice21@example.com", "account_type": "standard_user", "department": "Sales" }, { "id": 40, "first_name": "Zoe", "last_name": "Krajcik", "user_principal_name": "zoe_krajcik@example.net", "account_type": "standard_user", "department": "HR" }, { "id": 41, "first_name": "Roland", "last_name": "Lynch", "user_principal_name": "roland.lynch99@example.net", "account_type": "standard_user", "department": "Engineering" }, { "id": 42, "first_name": "Eudora", "last_name": "Rippin", "user_principal_name": "eudora_rippin@example.com", "account_type": "standard_user", "department": "Engineering" }, { "id": 43, "first_name": "Ilene", "last_name": "Beier", "user_principal_name": "ilene_beier38@example.net", "account_type": "standard_user", "department": "HR" }, { "id": 44, "first_name": "Retta", "last_name": "Aufderhar", "user_principal_name": "retta_aufderhar@example.org", "account_type": "privileged_user", "department": "Sales" }, { "id": 45, "first_name": "Casimer", "last_name": "Cruickshank", "user_principal_name": "casimer.cruickshank84@example.org", "account_type": "standard_user", "department": "Operations" }, { "id": 46, "first_name": "Walker", "last_name": "Morissette", "user_principal_name": "walker_morissette38@example.org", "account_type": "standard_user", "department": "HR" }, { "id": 47, "first_name": "Brayan", "last_name": "Bogisich", "user_principal_name": "brayan_bogisich@example.org", "account_type": "standard_user", "department": "Sales" }, { "id": 48, "first_name": "Jayme", "last_name": "Gutmann", "user_principal_name": "jayme.gutmann81@example.org", "account_type": "standard_user", "department": "Finance" }, { "id": 49, "first_name": "Lucio", "last_name": "Collins", "user_principal_name": "lucio.collins@example.org", "account_type": "standard_user", "department": "Finance" }, { "id": 50, "first_name": "Elton", "last_name": "Borer", "user_principal_name": "elton.borer20@example.com", "account_type": "standard_user", "department": "Operations" }, { "id": 51, "first_name": "Kristy", "last_name": "Jaskolski-Homenick", "user_principal_name": "kristy_jaskolski-homenick@example.net", "account_type": "standard_user", "department": "Engineering" }, { "id": 52, "first_name": "Josh", "last_name": "O'Connell", "user_principal_name": "josh.oconnell@example.com", "account_type": "standard_user", "department": "HR" }, { "id": 53, "first_name": "Michale", "last_name": "Metz", "user_principal_name": "michale.metz44@example.net", "account_type": "standard_user", "department": "IT" }, { "id": 54, "first_name": "Corine", "last_name": "McClure", "user_principal_name": "corine.mcclure93@example.net", "account_type": "standard_user", "department": "Operations" }, { "id": 55, "first_name": "Alejandra", "last_name": "Klein", "user_principal_name": "alejandra_klein43@example.org", "account_type": "standard_user", "department": "Operations" }, { "id": 56, "first_name": "Aylin", "last_name": "Cassin", "user_principal_name": "aylin_cassin89@example.net", "account_type": "standard_user", "department": "Engineering" }, { "id": 57, "first_name": "Jess", "last_name": "Walker", "user_principal_name": "jess.walker40@example.com", "account_type": "standard_user", "department": "Finance" }, { "id": 58, "first_name": "Irene", "last_name": "Watsica", "user_principal_name": "irene.watsica@example.org", "account_type": "standard_user", "department": "Finance" }, { "id": 59, "first_name": "Lionel", "last_name": "Feeney", "user_principal_name": "lionel_feeney84@example.com", "account_type": "standard_user", "department": "Sales" }, { "id": 60, "first_name": "Margarete", "last_name": "Harber", "user_principal_name": "margarete.harber@example.com", "account_type": "standard_user", "department": "Sales" }, { "id": 61, "first_name": "Yessenia", "last_name": "Rohan", "user_principal_name": "yessenia_rohan@example.com", "account_type": "standard_user", "department": "HR" }, { "id": 62, "first_name": "Oscar", "last_name": "Hilll", "user_principal_name": "oscar_hilll8@example.com", "account_type": "standard_user", "department": "Finance" }, { "id": 63, "first_name": "Mia", "last_name": "Emmerich", "user_principal_name": "mia_emmerich25@example.com", "account_type": "standard_user", "department": "Finance" }, { "id": 64, "first_name": "Rudy", "last_name": "Treutel", "user_principal_name": "rudy_treutel49@example.net", "account_type": "standard_user", "department": "Operations" }, { "id": 65, "first_name": "Dedric", "last_name": "Stracke", "user_principal_name": "dedric_stracke@example.net", "account_type": "standard_user", "department": "Finance" }, { "id": 66, "first_name": "Aurelio", "last_name": "Walker", "user_principal_name": "aurelio.walker@example.com", "account_type": "standard_user", "department": "Sales" }, { "id": 67, "first_name": "Garth", "last_name": "Denesik", "user_principal_name": "garth.denesik29@example.org", "account_type": "standard_user", "department": "Engineering" }, { "id": 68, "first_name": "Gilda", "last_name": "Wyman-Lubowitz", "user_principal_name": "gilda.wyman-lubowitz38@example.com", "account_type": "standard_user", "department": "Sales" }, { "id": 69, "first_name": "Lowell", "last_name": "Ondricka", "user_principal_name": "lowell.ondricka64@example.org", "account_type": "standard_user", "department": "Engineering" }, { "id": 70, "first_name": "Jody", "last_name": "Murphy", "user_principal_name": "jody_murphy@example.net", "account_type": "privileged_user", "department": "Engineering" }, { "id": 71, "first_name": "Osvaldo", "last_name": "Wunsch-Schoen", "user_principal_name": "osvaldo.wunsch-schoen@example.net", "account_type": "standard_user", "department": "Sales" }, { "id": 72, "first_name": "Karine", "last_name": "Swift", "user_principal_name": "karine.swift@example.com", "account_type": "standard_user", "department": "IT" }, { "id": 73, "first_name": "Isaac", "last_name": "McClure", "user_principal_name": "isaac_mcclure@example.org", "account_type": "standard_user", "department": "Engineering" }, { "id": 74, "first_name": "Jayda", "last_name": "Denesik", "user_principal_name": "jayda.denesik@example.com", "account_type": "privileged_user", "department": "Finance" }, { "id": 75, "first_name": "Kian", "last_name": "Waelchi", "user_principal_name": "kian.waelchi@example.com", "account_type": "standard_user", "department": "Engineering" }, { "id": 76, "first_name": "Emmalee", "last_name": "Romaguera", "user_principal_name": "emmalee_romaguera89@example.com", "account_type": "standard_user", "department": "Finance" }, { "id": 77, "first_name": "Kennith", "last_name": "Lubowitz", "user_principal_name": "kennith_lubowitz@example.org", "account_type": "standard_user", "department": "Sales" }, { "id": 78, "first_name": "Alison", "last_name": "Hilpert", "user_principal_name": "alison.hilpert92@example.com", "account_type": "standard_user", "department": "Sales" }, { "id": 79, "first_name": "Cassie", "last_name": "Beier", "user_principal_name": "cassie_beier@example.org", "account_type": "standard_user", "department": "HR" }, { "id": 80, "first_name": "Jasmine", "last_name": "DuBuque", "user_principal_name": "jasmine_dubuque26@example.com", "account_type": "standard_user", "department": "Sales" }, { "id": 81, "first_name": "Sherry", "last_name": "Crona", "user_principal_name": "sherry.crona88@example.com", "account_type": "standard_user", "department": "Sales" }, { "id": 82, "first_name": "Darryl", "last_name": "Cummings", "user_principal_name": "darryl.cummings92@example.net", "account_type": "privileged_user", "department": "Sales" }, { "id": 83, "first_name": "Tyrell", "last_name": "Berge", "user_principal_name": "tyrell_berge@example.com", "account_type": "standard_user", "department": "Engineering" }, { "id": 84, "first_name": "Brando", "last_name": "Torp", "user_principal_name": "brando.torp@example.net", "account_type": "standard_user", "department": "IT" }, { "id": 85, "first_name": "Flavio", "last_name": "Roob", "user_principal_name": "flavio.roob66@example.com", "account_type": "privileged_user", "department": "Sales" }, { "id": 86, "first_name": "Lizzie", "last_name": "Johns", "user_principal_name": "lizzie.johns@example.com", "account_type": "privileged_user", "department": "Sales" }, { "id": 87, "first_name": "Sienna", "last_name": "Tremblay", "user_principal_name": "sienna_tremblay45@example.net", "account_type": "standard_user", "department": "Operations" }, { "id": 88, "first_name": "Danial", "last_name": "Bechtelar", "user_principal_name": "danial.bechtelar@example.net", "account_type": "standard_user", "department": "Engineering" }, { "id": 89, "first_name": "Desmond", "last_name": "McKenzie", "user_principal_name": "desmond_mckenzie76@example.net", "account_type": "standard_user", "department": "HR" }, { "id": 90, "first_name": "Darren", "last_name": "Emmerich", "user_principal_name": "darren.emmerich76@example.org", "account_type": "standard_user", "department": "Operations" }, { "id": 91, "first_name": "Cora", "last_name": "Powlowski", "user_principal_name": "cora_powlowski@example.org", "account_type": "standard_user", "department": "IT" }, { "id": 92, "first_name": "Bo", "last_name": "Nienow", "user_principal_name": "bo_nienow32@example.net", "account_type": "standard_user", "department": "Engineering" }, { "id": 93, "first_name": "Essie", "last_name": "Streich", "user_principal_name": "essie_streich@example.com", "account_type": "standard_user", "department": "Sales" }, { "id": 94, "first_name": "Jamison", "last_name": "Schroeder", "user_principal_name": "jamison.schroeder@example.com", "account_type": "standard_user", "department": "Operations" }, { "id": 95, "first_name": "Alverta", "last_name": "Goyette", "user_principal_name": "alverta.goyette@example.com", "account_type": "privileged_user", "department": "Operations" }, { "id": 96, "first_name": "Doyle", "last_name": "Graham", "user_principal_name": "doyle.graham@example.com", "account_type": "privileged_user", "department": "Sales" }, { "id": 97, "first_name": "Hilbert", "last_name": "Stiedemann", "user_principal_name": "hilbert.stiedemann@example.com", "account_type": "standard_user", "department": "Sales" }, { "id": 98, "first_name": "Chase", "last_name": "O'Conner", "user_principal_name": "chase.oconner39@example.net", "account_type": "standard_user", "department": "IT" }, { "id": 99, "first_name": "Toni", "last_name": "Wuckert", "user_principal_name": "toni_wuckert@example.net", "account_type": "standard_user", "department": "Operations" }, { "id": 100, "first_name": "Ken", "last_name": "Koelpin", "user_principal_name": "ken_koelpin@example.com", "account_type": "privileged_user", "department": "Finance" }, { "id": 101, "first_name": "Kathy", "last_name": "Wyman", "user_principal_name": "kathy_wyman@example.com", "account_type": "standard_user", "department": "HR" }, { "id": 102, "first_name": "Hardy", "last_name": "Emmerich", "user_principal_name": "hardy.emmerich26@example.com", "account_type": "standard_user", "department": "Operations" }, { "id": 103, "first_name": "Lynn", "last_name": "Rice", "user_principal_name": "lynn_rice65@example.net", "account_type": "standard_user", "department": "Finance" }, { "id": 104, "first_name": "Cristopher", "last_name": "Kub", "user_principal_name": "cristopher.kub29@example.com", "account_type": "privileged_user", "department": "Engineering" }, { "id": 105, "first_name": "Johann", "last_name": "Collins", "user_principal_name": "johann.collins@example.com", "account_type": "standard_user", "department": "Sales" }, { "id": 106, "first_name": "Dane", "last_name": "Ferry", "user_principal_name": "dane.ferry92@example.org", "account_type": "standard_user", "department": "Operations" }, { "id": 107, "first_name": "Ellen", "last_name": "Bauch", "user_principal_name": "ellen.bauch@example.org", "account_type": "standard_user", "department": "IT" }, { "id": 108, "first_name": "Maurine", "last_name": "Predovic", "user_principal_name": "maurine.predovic97@example.org", "account_type": "standard_user", "department": "Operations" }, { "id": 109, "first_name": "Norbert", "last_name": "Roob", "user_principal_name": "norbert.roob33@example.com", "account_type": "standard_user", "department": "Engineering" }, { "id": 110, "first_name": "Ollie", "last_name": "Kulas", "user_principal_name": "ollie_kulas78@example.com", "account_type": "standard_user", "department": "Engineering" } ], "computers": [ { "id": 1, "hostname": "HOST-0074", "operating_system": "Windows Server 2022", "last_boot_at": "2025-03-11 15:36:12" }, { "id": 2, "hostname": "HOST-4236", "operating_system": "Windows 10 Enterprise", "last_boot_at": "2025-03-11 14:07:12" }, { "id": 3, "hostname": "HOST-6177", "operating_system": "Windows 11 Enterprise", "last_boot_at": "2025-03-10 17:12:49" }, { "id": 4, "hostname": "HOST-1832", "operating_system": "Windows 11 Enterprise", "last_boot_at": "2025-03-10 10:13:58" }, { "id": 5, "hostname": "HOST-5541", "operating_system": "Windows 11 Enterprise", "last_boot_at": "2025-03-11 16:05:20" }, { "id": 6, "hostname": "HOST-1215", "operating_system": "Windows Server 2022", "last_boot_at": "2025-03-11 10:53:22" }, { "id": 7, "hostname": "HOST-5690", "operating_system": "Windows 11 Enterprise", "last_boot_at": "2025-03-11 17:25:23" }, { "id": 8, "hostname": "HOST-5603", "operating_system": "Windows 11 Enterprise", "last_boot_at": "2025-03-10 11:01:24" }, { "id": 9, "hostname": "HOST-9211", "operating_system": "Windows 10 Enterprise", "last_boot_at": "2025-03-10 11:56:02" }, { "id": 10, "hostname": "HOST-9244", "operating_system": "Windows 10 Enterprise", "last_boot_at": "2025-03-10 08:47:41" }, { "id": 11, "hostname": "HOST-2873", "operating_system": "Windows 11 Enterprise", "last_boot_at": "2025-03-10 17:36:04" }, { "id": 12, "hostname": "HOST-1854", "operating_system": "Windows 11 Enterprise", "last_boot_at": "2025-03-10 07:08:19" }, { "id": 13, "hostname": "HOST-5961", "operating_system": "Windows 10 Enterprise", "last_boot_at": "2025-03-10 10:55:59" }, { "id": 14, "hostname": "HOST-7073", "operating_system": "Windows 11 Enterprise", "last_boot_at": "2025-03-10 14:24:41" }, { "id": 15, "hostname": "HOST-8606", "operating_system": "Windows 10 Enterprise", "last_boot_at": "2025-03-11 09:16:02" }, { "id": 16, "hostname": "HOST-6772", "operating_system": "Windows 10 Enterprise", "last_boot_at": "2025-03-11 09:47:33" }, { "id": 17, "hostname": "HOST-9373", "operating_system": "Windows 11 Enterprise", "last_boot_at": "2025-03-11 11:57:57" }, { "id": 18, "hostname": "HOST-0775", "operating_system": "Windows 11 Enterprise", "last_boot_at": "2025-03-11 13:31:37" }, { "id": 19, "hostname": "HOST-2115", "operating_system": "Windows 11 Enterprise", "last_boot_at": "2025-03-11 12:17:10" }, { "id": 20, "hostname": "HOST-9003", "operating_system": "Windows Server 2022", "last_boot_at": "2025-03-10 23:19:12" }, { "id": 21, "hostname": "HOST-8543", "operating_system": "Windows Server 2022", "last_boot_at": "2025-03-11 05:36:42" }, { "id": 22, "hostname": "HOST-8193", "operating_system": "Windows 10 Enterprise", "last_boot_at": "2025-03-11 15:20:42" }, { "id": 23, "hostname": "HOST-1933", "operating_system": "Windows 10 Enterprise", "last_boot_at": "2025-03-10 16:22:44" }, { "id": 24, "hostname": "HOST-3903", "operating_system": "Windows 10 Enterprise", "last_boot_at": "2025-03-10 12:25:09" }, { "id": 25, "hostname": "HOST-6664", "operating_system": "Windows 11 Enterprise", "last_boot_at": "2025-03-11 08:38:35" }, { "id": 26, "hostname": "HOST-7087", "operating_system": "Windows 11 Enterprise", "last_boot_at": "2025-03-10 15:25:55" }, { "id": 27, "hostname": "HOST-4857", "operating_system": "Windows Server 2022", "last_boot_at": "2025-03-11 10:30:08" }, { "id": 28, "hostname": "HOST-2180", "operating_system": "Windows 11 Enterprise", "last_boot_at": "2025-03-11 16:44:29" }, { "id": 29, "hostname": "HOST-8568", "operating_system": "Windows Server 2019", "last_boot_at": "2025-03-11 07:41:31" }, { "id": 30, "hostname": "HOST-2960", "operating_system": "Windows 10 Enterprise", "last_boot_at": "2025-03-10 12:59:43" }, { "id": 31, "hostname": "HOST-8967", "operating_system": "Windows Server 2022", "last_boot_at": "2025-03-10 15:27:14" }, { "id": 32, "hostname": "HOST-8387", "operating_system": "Windows 11 Enterprise", "last_boot_at": "2025-03-11 15:55:56" }, { "id": 33, "hostname": "HOST-4501", "operating_system": "Windows 11 Enterprise", "last_boot_at": "2025-03-10 19:47:04" }, { "id": 34, "hostname": "HOST-9673", "operating_system": "Windows 10 Enterprise", "last_boot_at": "2025-03-11 12:50:53" }, { "id": 35, "hostname": "HOST-5770", "operating_system": "Windows Server 2022", "last_boot_at": "2025-03-10 15:36:38" }, { "id": 36, "hostname": "HOST-2105", "operating_system": "Windows 11 Enterprise", "last_boot_at": "2025-03-10 10:50:13" } ], "domain_controllers": [ { "id": 1, "hostname": "DC65", "site": "branch-south", "last_boot_at": "2025-03-10 16:44:51" }, { "id": 2, "hostname": "DC12", "site": "head-office", "last_boot_at": "2025-03-10 05:13:07" }, { "id": 3, "hostname": "DC35", "site": "datacentre", "last_boot_at": "2025-03-10 01:33:48" }, { "id": 4, "hostname": "DC60", "site": "branch-north", "last_boot_at": "2025-03-10 06:01:58" } ], "event_types": [ { "id": 1, "catalogue": "teaching-subset", "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_on": "host" }, { "id": 2, "catalogue": "teaching-subset", "event_code": "4625", "channel": "Security", "category": "logon_failure", "logged_on": "host" }, { "id": 3, "catalogue": "teaching-subset", "event_code": "4634", "channel": "Security", "category": "logoff", "logged_on": "host" }, { "id": 4, "catalogue": "teaching-subset", "event_code": "4648", "channel": "Security", "category": "explicit_credentials", "logged_on": "host" }, { "id": 5, "catalogue": "teaching-subset", "event_code": "4672", "channel": "Security", "category": "special_privileges", "logged_on": "host" }, { "id": 6, "catalogue": "teaching-subset", "event_code": "4688", "channel": "Security", "category": "process_created", "logged_on": "host" }, { "id": 7, "catalogue": "teaching-subset", "event_code": "1102", "channel": "Security", "category": "audit_log_cleared", "logged_on": "host" }, { "id": 8, "catalogue": "teaching-subset", "event_code": "7036", "channel": "System", "category": "service_state_changed", "logged_on": "host" }, { "id": 9, "catalogue": "teaching-subset", "event_code": "7045", "channel": "System", "category": "service_installed", "logged_on": "host" }, { "id": 10, "catalogue": "teaching-subset", "event_code": "6005", "channel": "System", "category": "event_log_started", "logged_on": "host" }, { "id": 11, "catalogue": "teaching-subset", "event_code": "4728", "channel": "Security", "category": "group_member_added", "logged_on": "domain_controller" }, { "id": 12, "catalogue": "teaching-subset", "event_code": "4740", "channel": "Security", "category": "account_locked_out", "logged_on": "domain_controller" }, { "id": 13, "catalogue": "teaching-subset", "event_code": "4768", "channel": "Security", "category": "kerberos_tgt_requested", "logged_on": "domain_controller" }, { "id": 14, "catalogue": "teaching-subset", "event_code": "4771", "channel": "Security", "category": "kerberos_preauth_failed", "logged_on": "domain_controller" } ], "directory_events": [ { "id": 1, "domain_controller_id": 4, "hostname": "DC60", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 06:17:30", "account_id": 23, "client_ip": "203.0.113.41", "group_name": null }, { "id": 2, "domain_controller_id": 4, "hostname": "DC60", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 06:45:17", "account_id": 29, "client_ip": "192.0.2.88", "group_name": null }, { "id": 3, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 17:32:17", "account_id": 86, "client_ip": "192.0.2.42", "group_name": null }, { "id": 4, "domain_controller_id": 3, "hostname": "DC35", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 02:15:45", "account_id": 98, "client_ip": "203.0.113.198", "group_name": null }, { "id": 5, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 18:30:21", "account_id": 98, "client_ip": "192.0.2.148", "group_name": null }, { "id": 6, "domain_controller_id": 2, "hostname": "DC12", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 05:31:44", "account_id": 6, "client_ip": "203.0.113.79", "group_name": null }, { "id": 7, "domain_controller_id": 4, "hostname": "DC60", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 07:25:47", "account_id": 95, "client_ip": "198.51.100.230", "group_name": null }, { "id": 8, "domain_controller_id": 4, "hostname": "DC60", "event_type_id": 14, "event_code": "4771", "category": "kerberos_preauth_failed", "logged_at": "2025-03-10 07:57:12", "account_id": 29, "client_ip": "203.0.113.231", "group_name": null }, { "id": 9, "domain_controller_id": 2, "hostname": "DC12", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 05:37:18", "account_id": 106, "client_ip": "198.51.100.221", "group_name": null }, { "id": 10, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 18:59:42", "account_id": 48, "client_ip": "203.0.113.180", "group_name": null }, { "id": 11, "domain_controller_id": 2, "hostname": "DC12", "event_type_id": 14, "event_code": "4771", "category": "kerberos_preauth_failed", "logged_at": "2025-03-10 06:15:14", "account_id": 74, "client_ip": "192.0.2.157", "group_name": null }, { "id": 12, "domain_controller_id": 3, "hostname": "DC35", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 02:38:50", "account_id": 1, "client_ip": "192.0.2.65", "group_name": null }, { "id": 13, "domain_controller_id": 4, "hostname": "DC60", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 08:46:30", "account_id": 76, "client_ip": "198.51.100.112", "group_name": null }, { "id": 14, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 14, "event_code": "4771", "category": "kerberos_preauth_failed", "logged_at": "2025-03-10 19:38:26", "account_id": 40, "client_ip": "192.0.2.216", "group_name": null }, { "id": 15, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 14, "event_code": "4771", "category": "kerberos_preauth_failed", "logged_at": "2025-03-10 20:04:49", "account_id": 27, "client_ip": "203.0.113.125", "group_name": null }, { "id": 16, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 20:57:49", "account_id": 23, "client_ip": "198.51.100.60", "group_name": null }, { "id": 17, "domain_controller_id": 3, "hostname": "DC35", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 03:32:48", "account_id": 106, "client_ip": "192.0.2.189", "group_name": null }, { "id": 18, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 21:03:57", "account_id": 71, "client_ip": "192.0.2.93", "group_name": null }, { "id": 19, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 21:11:59", "account_id": 98, "client_ip": "203.0.113.193", "group_name": null }, { "id": 20, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 21:23:16", "account_id": 14, "client_ip": "203.0.113.114", "group_name": null }, { "id": 21, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 22:08:21", "account_id": 21, "client_ip": "192.0.2.173", "group_name": null }, { "id": 22, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 22:28:25", "account_id": 82, "client_ip": "203.0.113.74", "group_name": null }, { "id": 23, "domain_controller_id": 2, "hostname": "DC12", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 06:24:42", "account_id": 29, "client_ip": "203.0.113.196", "group_name": null }, { "id": 24, "domain_controller_id": 2, "hostname": "DC12", "event_type_id": 12, "event_code": "4740", "category": "account_locked_out", "logged_at": "2025-03-10 06:33:25", "account_id": 60, "client_ip": null, "group_name": null }, { "id": 25, "domain_controller_id": 2, "hostname": "DC12", "event_type_id": 12, "event_code": "4740", "category": "account_locked_out", "logged_at": "2025-03-10 06:35:58", "account_id": 73, "client_ip": null, "group_name": null }, { "id": 26, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 14, "event_code": "4771", "category": "kerberos_preauth_failed", "logged_at": "2025-03-10 23:17:36", "account_id": 19, "client_ip": "198.51.100.177", "group_name": null }, { "id": 27, "domain_controller_id": 2, "hostname": "DC12", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 07:08:21", "account_id": 71, "client_ip": "198.51.100.226", "group_name": null }, { "id": 28, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 23:22:12", "account_id": 94, "client_ip": "192.0.2.34", "group_name": null }, { "id": 29, "domain_controller_id": 4, "hostname": "DC60", "event_type_id": 14, "event_code": "4771", "category": "kerberos_preauth_failed", "logged_at": "2025-03-10 09:16:06", "account_id": 86, "client_ip": "198.51.100.226", "group_name": null }, { "id": 30, "domain_controller_id": 2, "hostname": "DC12", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 08:06:55", "account_id": 51, "client_ip": "192.0.2.35", "group_name": null }, { "id": 31, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 12, "event_code": "4740", "category": "account_locked_out", "logged_at": "2025-03-10 23:42:29", "account_id": 107, "client_ip": null, "group_name": null }, { "id": 32, "domain_controller_id": 2, "hostname": "DC12", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 08:26:07", "account_id": 30, "client_ip": "192.0.2.214", "group_name": null }, { "id": 33, "domain_controller_id": 2, "hostname": "DC12", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 08:57:46", "account_id": 24, "client_ip": "192.0.2.84", "group_name": null }, { "id": 34, "domain_controller_id": 2, "hostname": "DC12", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 09:24:45", "account_id": 29, "client_ip": "192.0.2.136", "group_name": null }, { "id": 35, "domain_controller_id": 3, "hostname": "DC35", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 04:23:39", "account_id": 87, "client_ip": "198.51.100.4", "group_name": null }, { "id": 36, "domain_controller_id": 3, "hostname": "DC35", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 05:06:46", "account_id": 12, "client_ip": "192.0.2.126", "group_name": null }, { "id": 37, "domain_controller_id": 3, "hostname": "DC35", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 05:35:17", "account_id": 80, "client_ip": "198.51.100.1", "group_name": null }, { "id": 38, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 14, "event_code": "4771", "category": "kerberos_preauth_failed", "logged_at": "2025-03-10 23:52:41", "account_id": 9, "client_ip": "192.0.2.137", "group_name": null }, { "id": 39, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-11 00:35:11", "account_id": 17, "client_ip": "203.0.113.218", "group_name": null }, { "id": 40, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-11 00:57:24", "account_id": 81, "client_ip": "192.0.2.160", "group_name": null }, { "id": 41, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 11, "event_code": "4728", "category": "group_member_added", "logged_at": "2025-03-11 01:56:09", "account_id": 84, "client_ip": null, "group_name": "Remote Desktop Users" }, { "id": 42, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-11 02:10:30", "account_id": 81, "client_ip": "198.51.100.12", "group_name": null }, { "id": 43, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 14, "event_code": "4771", "category": "kerberos_preauth_failed", "logged_at": "2025-03-11 02:31:37", "account_id": 88, "client_ip": "192.0.2.83", "group_name": null }, { "id": 44, "domain_controller_id": 2, "hostname": "DC12", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 09:43:43", "account_id": 30, "client_ip": "203.0.113.121", "group_name": null }, { "id": 45, "domain_controller_id": 4, "hostname": "DC60", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 10:16:09", "account_id": 26, "client_ip": "203.0.113.13", "group_name": null }, { "id": 46, "domain_controller_id": 2, "hostname": "DC12", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 10:24:18", "account_id": 4, "client_ip": "198.51.100.59", "group_name": null }, { "id": 47, "domain_controller_id": 4, "hostname": "DC60", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 10:33:43", "account_id": 26, "client_ip": "192.0.2.129", "group_name": null }, { "id": 48, "domain_controller_id": 3, "hostname": "DC35", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 06:35:42", "account_id": 64, "client_ip": "192.0.2.155", "group_name": null }, { "id": 49, "domain_controller_id": 4, "hostname": "DC60", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 10:48:45", "account_id": 68, "client_ip": "203.0.113.66", "group_name": null }, { "id": 50, "domain_controller_id": 2, "hostname": "DC12", "event_type_id": 14, "event_code": "4771", "category": "kerberos_preauth_failed", "logged_at": "2025-03-10 11:22:47", "account_id": 65, "client_ip": "192.0.2.135", "group_name": null }, { "id": 51, "domain_controller_id": 3, "hostname": "DC35", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 07:08:59", "account_id": 58, "client_ip": "198.51.100.116", "group_name": null }, { "id": 52, "domain_controller_id": 4, "hostname": "DC60", "event_type_id": 12, "event_code": "4740", "category": "account_locked_out", "logged_at": "2025-03-10 11:21:52", "account_id": 59, "client_ip": null, "group_name": null }, { "id": 53, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-11 02:50:55", "account_id": 71, "client_ip": "198.51.100.248", "group_name": null }, { "id": 54, "domain_controller_id": 3, "hostname": "DC35", "event_type_id": 12, "event_code": "4740", "category": "account_locked_out", "logged_at": "2025-03-10 07:57:33", "account_id": 10, "client_ip": null, "group_name": null }, { "id": 55, "domain_controller_id": 2, "hostname": "DC12", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 11:26:06", "account_id": 19, "client_ip": "192.0.2.200", "group_name": null }, { "id": 56, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 11, "event_code": "4728", "category": "group_member_added", "logged_at": "2025-03-11 03:14:18", "account_id": 8, "client_ip": null, "group_name": "Helpdesk Operators" }, { "id": 57, "domain_controller_id": 3, "hostname": "DC35", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 08:12:27", "account_id": 86, "client_ip": "192.0.2.76", "group_name": null }, { "id": 58, "domain_controller_id": 2, "hostname": "DC12", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 11:41:10", "account_id": 95, "client_ip": "198.51.100.208", "group_name": null }, { "id": 59, "domain_controller_id": 2, "hostname": "DC12", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 12:10:35", "account_id": 85, "client_ip": "203.0.113.218", "group_name": null }, { "id": 60, "domain_controller_id": 3, "hostname": "DC35", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 08:55:33", "account_id": 74, "client_ip": "198.51.100.239", "group_name": null }, { "id": 61, "domain_controller_id": 2, "hostname": "DC12", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 12:23:18", "account_id": 70, "client_ip": "203.0.113.72", "group_name": null }, { "id": 62, "domain_controller_id": 2, "hostname": "DC12", "event_type_id": 14, "event_code": "4771", "category": "kerberos_preauth_failed", "logged_at": "2025-03-10 13:23:24", "account_id": 103, "client_ip": "203.0.113.133", "group_name": null }, { "id": 63, "domain_controller_id": 3, "hostname": "DC35", "event_type_id": 11, "event_code": "4728", "category": "group_member_added", "logged_at": "2025-03-10 09:40:31", "account_id": 104, "client_ip": null, "group_name": "Helpdesk Operators" }, { "id": 64, "domain_controller_id": 4, "hostname": "DC60", "event_type_id": 14, "event_code": "4771", "category": "kerberos_preauth_failed", "logged_at": "2025-03-10 11:59:31", "account_id": 40, "client_ip": "203.0.113.98", "group_name": null }, { "id": 65, "domain_controller_id": 2, "hostname": "DC12", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 13:48:59", "account_id": 15, "client_ip": "192.0.2.209", "group_name": null }, { "id": 66, "domain_controller_id": 3, "hostname": "DC35", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 10:42:00", "account_id": 71, "client_ip": "192.0.2.214", "group_name": null }, { "id": 67, "domain_controller_id": 2, "hostname": "DC12", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 14:33:41", "account_id": 60, "client_ip": "198.51.100.21", "group_name": null }, { "id": 68, "domain_controller_id": 4, "hostname": "DC60", "event_type_id": 14, "event_code": "4771", "category": "kerberos_preauth_failed", "logged_at": "2025-03-10 12:50:47", "account_id": 34, "client_ip": "192.0.2.108", "group_name": null }, { "id": 69, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 14, "event_code": "4771", "category": "kerberos_preauth_failed", "logged_at": "2025-03-11 03:17:06", "account_id": 43, "client_ip": "192.0.2.76", "group_name": null }, { "id": 70, "domain_controller_id": 2, "hostname": "DC12", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 15:34:04", "account_id": 110, "client_ip": "203.0.113.236", "group_name": null }, { "id": 71, "domain_controller_id": 3, "hostname": "DC35", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 11:33:10", "account_id": 25, "client_ip": "203.0.113.247", "group_name": null }, { "id": 72, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 12, "event_code": "4740", "category": "account_locked_out", "logged_at": "2025-03-11 04:15:14", "account_id": 51, "client_ip": null, "group_name": null }, { "id": 73, "domain_controller_id": 4, "hostname": "DC60", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 13:07:08", "account_id": 1, "client_ip": "192.0.2.143", "group_name": null }, { "id": 74, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-11 04:52:51", "account_id": 65, "client_ip": "203.0.113.144", "group_name": null }, { "id": 75, "domain_controller_id": 2, "hostname": "DC12", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 15:56:58", "account_id": 67, "client_ip": "192.0.2.171", "group_name": null }, { "id": 76, "domain_controller_id": 4, "hostname": "DC60", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 13:46:35", "account_id": 87, "client_ip": "203.0.113.156", "group_name": null }, { "id": 77, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-11 05:39:06", "account_id": 70, "client_ip": "203.0.113.101", "group_name": null }, { "id": 78, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-11 05:44:52", "account_id": 15, "client_ip": "203.0.113.221", "group_name": null }, { "id": 79, "domain_controller_id": 3, "hostname": "DC35", "event_type_id": 14, "event_code": "4771", "category": "kerberos_preauth_failed", "logged_at": "2025-03-10 12:00:49", "account_id": 33, "client_ip": "203.0.113.234", "group_name": null }, { "id": 80, "domain_controller_id": 4, "hostname": "DC60", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 14:44:43", "account_id": 30, "client_ip": "198.51.100.218", "group_name": null }, { "id": 81, "domain_controller_id": 4, "hostname": "DC60", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 15:23:43", "account_id": 27, "client_ip": "198.51.100.89", "group_name": null }, { "id": 82, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-11 06:09:59", "account_id": 85, "client_ip": "192.0.2.147", "group_name": null }, { "id": 83, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-11 06:13:33", "account_id": 99, "client_ip": "198.51.100.199", "group_name": null }, { "id": 84, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-11 07:02:22", "account_id": 34, "client_ip": "198.51.100.76", "group_name": null }, { "id": 85, "domain_controller_id": 2, "hostname": "DC12", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 16:01:10", "account_id": 76, "client_ip": "203.0.113.203", "group_name": null }, { "id": 86, "domain_controller_id": 3, "hostname": "DC35", "event_type_id": 14, "event_code": "4771", "category": "kerberos_preauth_failed", "logged_at": "2025-03-10 12:52:51", "account_id": 91, "client_ip": "192.0.2.199", "group_name": null }, { "id": 87, "domain_controller_id": 2, "hostname": "DC12", "event_type_id": 14, "event_code": "4771", "category": "kerberos_preauth_failed", "logged_at": "2025-03-10 16:58:49", "account_id": 49, "client_ip": "203.0.113.141", "group_name": null }, { "id": 88, "domain_controller_id": 4, "hostname": "DC60", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 16:00:06", "account_id": 8, "client_ip": "198.51.100.35", "group_name": null }, { "id": 89, "domain_controller_id": 2, "hostname": "DC12", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 17:37:46", "account_id": 103, "client_ip": "192.0.2.174", "group_name": null }, { "id": 90, "domain_controller_id": 2, "hostname": "DC12", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 18:20:40", "account_id": 76, "client_ip": "192.0.2.244", "group_name": null }, { "id": 91, "domain_controller_id": 2, "hostname": "DC12", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 19:02:58", "account_id": 10, "client_ip": "203.0.113.233", "group_name": null }, { "id": 92, "domain_controller_id": 2, "hostname": "DC12", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 19:41:48", "account_id": 46, "client_ip": "198.51.100.233", "group_name": null }, { "id": 93, "domain_controller_id": 2, "hostname": "DC12", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 20:10:05", "account_id": 36, "client_ip": "198.51.100.164", "group_name": null }, { "id": 94, "domain_controller_id": 4, "hostname": "DC60", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 16:41:32", "account_id": 86, "client_ip": "203.0.113.108", "group_name": null }, { "id": 95, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-11 07:25:26", "account_id": 27, "client_ip": "198.51.100.70", "group_name": null }, { "id": 96, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-11 07:28:28", "account_id": 59, "client_ip": "192.0.2.228", "group_name": null }, { "id": 97, "domain_controller_id": 2, "hostname": "DC12", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 20:50:24", "account_id": 5, "client_ip": "198.51.100.113", "group_name": null }, { "id": 98, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-11 07:45:53", "account_id": 89, "client_ip": "198.51.100.232", "group_name": null }, { "id": 99, "domain_controller_id": 4, "hostname": "DC60", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 17:24:51", "account_id": 9, "client_ip": "192.0.2.129", "group_name": null }, { "id": 100, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 14, "event_code": "4771", "category": "kerberos_preauth_failed", "logged_at": "2025-03-11 08:09:09", "account_id": 8, "client_ip": "203.0.113.83", "group_name": null }, { "id": 101, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-11 08:20:40", "account_id": 42, "client_ip": "192.0.2.172", "group_name": null }, { "id": 102, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-11 08:31:42", "account_id": 90, "client_ip": "203.0.113.224", "group_name": null }, { "id": 103, "domain_controller_id": 2, "hostname": "DC12", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 21:22:12", "account_id": 75, "client_ip": "203.0.113.232", "group_name": null }, { "id": 104, "domain_controller_id": 3, "hostname": "DC35", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 13:21:22", "account_id": 95, "client_ip": "198.51.100.34", "group_name": null }, { "id": 105, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 14, "event_code": "4771", "category": "kerberos_preauth_failed", "logged_at": "2025-03-11 09:25:41", "account_id": 66, "client_ip": "198.51.100.118", "group_name": null }, { "id": 106, "domain_controller_id": 3, "hostname": "DC35", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 13:50:09", "account_id": 59, "client_ip": "192.0.2.195", "group_name": null }, { "id": 107, "domain_controller_id": 3, "hostname": "DC35", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 14:22:45", "account_id": 7, "client_ip": "203.0.113.186", "group_name": null }, { "id": 108, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 14, "event_code": "4771", "category": "kerberos_preauth_failed", "logged_at": "2025-03-11 10:16:38", "account_id": 97, "client_ip": "203.0.113.228", "group_name": null }, { "id": 109, "domain_controller_id": 2, "hostname": "DC12", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 22:06:31", "account_id": 12, "client_ip": "192.0.2.26", "group_name": null }, { "id": 110, "domain_controller_id": 4, "hostname": "DC60", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 17:44:04", "account_id": 17, "client_ip": "198.51.100.61", "group_name": null }, { "id": 111, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 14, "event_code": "4771", "category": "kerberos_preauth_failed", "logged_at": "2025-03-11 10:59:16", "account_id": 1, "client_ip": "198.51.100.18", "group_name": null }, { "id": 112, "domain_controller_id": 3, "hostname": "DC35", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 15:08:53", "account_id": 65, "client_ip": "203.0.113.70", "group_name": null }, { "id": 113, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-11 11:57:20", "account_id": 42, "client_ip": "198.51.100.232", "group_name": null }, { "id": 114, "domain_controller_id": 4, "hostname": "DC60", "event_type_id": 12, "event_code": "4740", "category": "account_locked_out", "logged_at": "2025-03-10 18:18:23", "account_id": 2, "client_ip": null, "group_name": null }, { "id": 115, "domain_controller_id": 3, "hostname": "DC35", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 15:43:05", "account_id": 54, "client_ip": "192.0.2.120", "group_name": null }, { "id": 116, "domain_controller_id": 4, "hostname": "DC60", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 18:39:03", "account_id": 10, "client_ip": "192.0.2.33", "group_name": null }, { "id": 117, "domain_controller_id": 2, "hostname": "DC12", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 22:23:15", "account_id": 75, "client_ip": "198.51.100.35", "group_name": null }, { "id": 118, "domain_controller_id": 2, "hostname": "DC12", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 23:07:17", "account_id": 36, "client_ip": "198.51.100.230", "group_name": null }, { "id": 119, "domain_controller_id": 3, "hostname": "DC35", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 16:07:38", "account_id": 91, "client_ip": "192.0.2.27", "group_name": null }, { "id": 120, "domain_controller_id": 4, "hostname": "DC60", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 18:56:34", "account_id": 15, "client_ip": "192.0.2.209", "group_name": null }, { "id": 121, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-11 12:07:36", "account_id": 6, "client_ip": "203.0.113.182", "group_name": null }, { "id": 122, "domain_controller_id": 2, "hostname": "DC12", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 23:58:08", "account_id": 57, "client_ip": "192.0.2.16", "group_name": null }, { "id": 123, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-11 12:28:50", "account_id": 63, "client_ip": "192.0.2.157", "group_name": null }, { "id": 124, "domain_controller_id": 4, "hostname": "DC60", "event_type_id": 14, "event_code": "4771", "category": "kerberos_preauth_failed", "logged_at": "2025-03-10 19:02:58", "account_id": 67, "client_ip": "192.0.2.3", "group_name": null }, { "id": 125, "domain_controller_id": 2, "hostname": "DC12", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-11 00:02:02", "account_id": 11, "client_ip": "192.0.2.146", "group_name": null }, { "id": 126, "domain_controller_id": 2, "hostname": "DC12", "event_type_id": 14, "event_code": "4771", "category": "kerberos_preauth_failed", "logged_at": "2025-03-11 00:24:05", "account_id": 60, "client_ip": "192.0.2.223", "group_name": null }, { "id": 127, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 14, "event_code": "4771", "category": "kerberos_preauth_failed", "logged_at": "2025-03-11 13:22:59", "account_id": 58, "client_ip": "203.0.113.59", "group_name": null }, { "id": 128, "domain_controller_id": 4, "hostname": "DC60", "event_type_id": 12, "event_code": "4740", "category": "account_locked_out", "logged_at": "2025-03-10 19:49:51", "account_id": 69, "client_ip": null, "group_name": null }, { "id": 129, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-11 13:52:13", "account_id": 1, "client_ip": "203.0.113.7", "group_name": null }, { "id": 130, "domain_controller_id": 4, "hostname": "DC60", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 20:17:24", "account_id": 76, "client_ip": "203.0.113.196", "group_name": null }, { "id": 131, "domain_controller_id": 3, "hostname": "DC35", "event_type_id": 14, "event_code": "4771", "category": "kerberos_preauth_failed", "logged_at": "2025-03-10 16:40:22", "account_id": 104, "client_ip": "198.51.100.79", "group_name": null }, { "id": 132, "domain_controller_id": 3, "hostname": "DC35", "event_type_id": 12, "event_code": "4740", "category": "account_locked_out", "logged_at": "2025-03-10 16:46:46", "account_id": 106, "client_ip": null, "group_name": null }, { "id": 133, "domain_controller_id": 2, "hostname": "DC12", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-11 00:43:21", "account_id": 84, "client_ip": "198.51.100.218", "group_name": null }, { "id": 134, "domain_controller_id": 2, "hostname": "DC12", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-11 01:43:38", "account_id": 109, "client_ip": "198.51.100.208", "group_name": null }, { "id": 135, "domain_controller_id": 2, "hostname": "DC12", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-11 02:31:20", "account_id": 58, "client_ip": "192.0.2.185", "group_name": null }, { "id": 136, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 14, "event_code": "4771", "category": "kerberos_preauth_failed", "logged_at": "2025-03-11 14:20:45", "account_id": 74, "client_ip": "198.51.100.163", "group_name": null }, { "id": 137, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 14, "event_code": "4771", "category": "kerberos_preauth_failed", "logged_at": "2025-03-11 14:28:05", "account_id": 80, "client_ip": "192.0.2.3", "group_name": null }, { "id": 138, "domain_controller_id": 3, "hostname": "DC35", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 17:23:08", "account_id": 66, "client_ip": "192.0.2.152", "group_name": null }, { "id": 139, "domain_controller_id": 3, "hostname": "DC35", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 17:49:09", "account_id": 11, "client_ip": "192.0.2.10", "group_name": null }, { "id": 140, "domain_controller_id": 2, "hostname": "DC12", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-11 02:51:10", "account_id": 49, "client_ip": "192.0.2.103", "group_name": null }, { "id": 141, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-11 14:52:46", "account_id": 55, "client_ip": "203.0.113.12", "group_name": null }, { "id": 142, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-11 15:18:11", "account_id": 107, "client_ip": "203.0.113.235", "group_name": null }, { "id": 143, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 14, "event_code": "4771", "category": "kerberos_preauth_failed", "logged_at": "2025-03-11 15:32:52", "account_id": 102, "client_ip": "192.0.2.244", "group_name": null }, { "id": 144, "domain_controller_id": 2, "hostname": "DC12", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-11 03:24:40", "account_id": 72, "client_ip": "203.0.113.175", "group_name": null }, { "id": 145, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 14, "event_code": "4771", "category": "kerberos_preauth_failed", "logged_at": "2025-03-11 16:22:00", "account_id": 82, "client_ip": "203.0.113.24", "group_name": null }, { "id": 146, "domain_controller_id": 4, "hostname": "DC60", "event_type_id": 14, "event_code": "4771", "category": "kerberos_preauth_failed", "logged_at": "2025-03-10 20:28:37", "account_id": 21, "client_ip": "192.0.2.206", "group_name": null }, { "id": 147, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-11 16:43:23", "account_id": 85, "client_ip": "198.51.100.100", "group_name": null }, { "id": 148, "domain_controller_id": 3, "hostname": "DC35", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 18:41:18", "account_id": 109, "client_ip": "203.0.113.249", "group_name": null }, { "id": 149, "domain_controller_id": 4, "hostname": "DC60", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 21:01:40", "account_id": 43, "client_ip": "203.0.113.211", "group_name": null }, { "id": 150, "domain_controller_id": 4, "hostname": "DC60", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 21:51:57", "account_id": 84, "client_ip": "203.0.113.51", "group_name": null }, { "id": 151, "domain_controller_id": 2, "hostname": "DC12", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-11 03:54:50", "account_id": 71, "client_ip": "198.51.100.121", "group_name": null }, { "id": 152, "domain_controller_id": 2, "hostname": "DC12", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-11 04:56:34", "account_id": 19, "client_ip": "203.0.113.106", "group_name": null }, { "id": 153, "domain_controller_id": 2, "hostname": "DC12", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-11 05:04:10", "account_id": 56, "client_ip": "192.0.2.64", "group_name": null }, { "id": 154, "domain_controller_id": 2, "hostname": "DC12", "event_type_id": 12, "event_code": "4740", "category": "account_locked_out", "logged_at": "2025-03-11 05:40:42", "account_id": 103, "client_ip": null, "group_name": null }, { "id": 155, "domain_controller_id": 4, "hostname": "DC60", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 22:30:31", "account_id": 52, "client_ip": "198.51.100.251", "group_name": null }, { "id": 156, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-11 16:57:40", "account_id": 52, "client_ip": "203.0.113.245", "group_name": null }, { "id": 157, "domain_controller_id": 2, "hostname": "DC12", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-11 06:08:07", "account_id": 29, "client_ip": "198.51.100.83", "group_name": null }, { "id": 158, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 11, "event_code": "4728", "category": "group_member_added", "logged_at": "2025-03-11 17:21:43", "account_id": 4, "client_ip": null, "group_name": "Helpdesk Operators" }, { "id": 159, "domain_controller_id": 3, "hostname": "DC35", "event_type_id": 11, "event_code": "4728", "category": "group_member_added", "logged_at": "2025-03-10 18:47:03", "account_id": 27, "client_ip": null, "group_name": "VPN Users" }, { "id": 160, "domain_controller_id": 2, "hostname": "DC12", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-11 06:22:37", "account_id": 47, "client_ip": "203.0.113.172", "group_name": null }, { "id": 161, "domain_controller_id": 4, "hostname": "DC60", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 23:28:07", "account_id": 35, "client_ip": "203.0.113.108", "group_name": null }, { "id": 162, "domain_controller_id": 2, "hostname": "DC12", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-11 06:27:38", "account_id": 82, "client_ip": "192.0.2.103", "group_name": null }, { "id": 163, "domain_controller_id": 2, "hostname": "DC12", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-11 06:45:53", "account_id": 57, "client_ip": "203.0.113.190", "group_name": null }, { "id": 164, "domain_controller_id": 3, "hostname": "DC35", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 18:52:48", "account_id": 51, "client_ip": "192.0.2.94", "group_name": null }, { "id": 165, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-11 17:56:05", "account_id": 42, "client_ip": "192.0.2.108", "group_name": null }, { "id": 166, "domain_controller_id": 4, "hostname": "DC60", "event_type_id": 14, "event_code": "4771", "category": "kerberos_preauth_failed", "logged_at": "2025-03-11 00:13:44", "account_id": 58, "client_ip": "198.51.100.101", "group_name": null }, { "id": 167, "domain_controller_id": 3, "hostname": "DC35", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 19:52:53", "account_id": 59, "client_ip": "203.0.113.31", "group_name": null }, { "id": 168, "domain_controller_id": 2, "hostname": "DC12", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-11 07:40:38", "account_id": 50, "client_ip": "192.0.2.73", "group_name": null }, { "id": 169, "domain_controller_id": 2, "hostname": "DC12", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-11 08:42:01", "account_id": 83, "client_ip": "203.0.113.190", "group_name": null }, { "id": 170, "domain_controller_id": 3, "hostname": "DC35", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 20:29:43", "account_id": 59, "client_ip": "192.0.2.65", "group_name": null }, { "id": 171, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-11 18:55:12", "account_id": 23, "client_ip": "203.0.113.18", "group_name": null }, { "id": 172, "domain_controller_id": 2, "hostname": "DC12", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-11 08:46:38", "account_id": 75, "client_ip": "198.51.100.112", "group_name": null }, { "id": 173, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-11 19:49:47", "account_id": 54, "client_ip": "192.0.2.129", "group_name": null }, { "id": 174, "domain_controller_id": 4, "hostname": "DC60", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-11 00:59:06", "account_id": 60, "client_ip": "192.0.2.57", "group_name": null }, { "id": 175, "domain_controller_id": 3, "hostname": "DC35", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 20:52:47", "account_id": 34, "client_ip": "198.51.100.61", "group_name": null }, { "id": 176, "domain_controller_id": 4, "hostname": "DC60", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-11 01:25:24", "account_id": 107, "client_ip": "203.0.113.164", "group_name": null }, { "id": 177, "domain_controller_id": 1, "hostname": "DC65", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-11 20:45:08", "account_id": 36, "client_ip": "192.0.2.99", "group_name": null }, { "id": 178, "domain_controller_id": 3, "hostname": "DC35", "event_type_id": 14, "event_code": "4771", "category": "kerberos_preauth_failed", "logged_at": "2025-03-10 21:23:12", "account_id": 30, "client_ip": "203.0.113.69", "group_name": null }, { "id": 179, "domain_controller_id": 3, "hostname": "DC35", "event_type_id": 13, "event_code": "4768", "category": "kerberos_tgt_requested", "logged_at": "2025-03-10 22:05:04", "account_id": 37, "client_ip": "198.51.100.234", "group_name": null }, { "id": 180, "domain_controller_id": 3, "hostname": "DC35", "event_type_id": 11, "event_code": "4728", "category": "group_member_added", "logged_at": "2025-03-10 22:14:00", "account_id": 91, "client_ip": null, "group_name": "Helpdesk Operators" } ], "host_events": [ { "id": 1, "computer_id": 26, "hostname": "HOST-7087", "event_type_id": 5, "event_code": "4672", "channel": "Security", "category": "special_privileges", "logged_at": "2025-03-10 15:49:23", "account_id": 99, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 2, "computer_id": 15, "hostname": "HOST-8606", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 09:52:26", "account_id": 7, "logon_type": "3", "source_ip": "198.51.100.175", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 3, "computer_id": 35, "hostname": "HOST-5770", "event_type_id": 2, "event_code": "4625", "channel": "Security", "category": "logon_failure", "logged_at": "2025-03-10 15:52:00", "account_id": 97, "logon_type": "2", "source_ip": "203.0.113.159", "failure_reason": "password_expired", "process_name": null, "service_name": null }, { "id": 4, "computer_id": 9, "hostname": "HOST-9211", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 12:28:39", "account_id": 88, "logon_type": "3", "source_ip": "198.51.100.169", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 5, "computer_id": 28, "hostname": "HOST-2180", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-11 17:09:45", "account_id": 60, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 6, "computer_id": 1, "hostname": "HOST-0074", "event_type_id": 2, "event_code": "4625", "channel": "Security", "category": "logon_failure", "logged_at": "2025-03-11 16:01:13", "account_id": 24, "logon_type": "2", "source_ip": "192.0.2.51", "failure_reason": "bad_password", "process_name": null, "service_name": null }, { "id": 7, "computer_id": 2, "hostname": "HOST-4236", "event_type_id": 2, "event_code": "4625", "channel": "Security", "category": "logon_failure", "logged_at": "2025-03-11 14:12:52", "account_id": 37, "logon_type": "3", "source_ip": "203.0.113.154", "failure_reason": "bad_password", "process_name": null, "service_name": null }, { "id": 8, "computer_id": 36, "hostname": "HOST-2105", "event_type_id": 9, "event_code": "7045", "channel": "System", "category": "service_installed", "logged_at": "2025-03-10 11:18:40", "account_id": null, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": "Spooler" }, { "id": 9, "computer_id": 12, "hostname": "HOST-1854", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-10 07:11:57", "account_id": 26, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 10, "computer_id": 34, "hostname": "HOST-9673", "event_type_id": 8, "event_code": "7036", "channel": "System", "category": "service_state_changed", "logged_at": "2025-03-11 13:19:51", "account_id": null, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": "wuauserv" }, { "id": 11, "computer_id": 9, "hostname": "HOST-9211", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-10 12:41:45", "account_id": 46, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 12, "computer_id": 4, "hostname": "HOST-1832", "event_type_id": 8, "event_code": "7036", "channel": "System", "category": "service_state_changed", "logged_at": "2025-03-10 10:53:01", "account_id": null, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": "RemoteRegistry" }, { "id": 13, "computer_id": 30, "hostname": "HOST-2960", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 13:02:41", "account_id": 57, "logon_type": "3", "source_ip": "203.0.113.13", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 14, "computer_id": 2, "hostname": "HOST-4236", "event_type_id": 5, "event_code": "4672", "channel": "Security", "category": "special_privileges", "logged_at": "2025-03-11 14:30:10", "account_id": 52, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 15, "computer_id": 19, "hostname": "HOST-2115", "event_type_id": 5, "event_code": "4672", "channel": "Security", "category": "special_privileges", "logged_at": "2025-03-11 12:39:29", "account_id": 61, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 16, "computer_id": 8, "hostname": "HOST-5603", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-10 11:21:52", "account_id": 62, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 17, "computer_id": 30, "hostname": "HOST-2960", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 13:38:51", "account_id": 91, "logon_type": "3", "source_ip": "203.0.113.194", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 18, "computer_id": 17, "hostname": "HOST-9373", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-11 12:32:07", "account_id": 42, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 19, "computer_id": 26, "hostname": "HOST-7087", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 15:53:38", "account_id": 63, "logon_type": "3", "source_ip": "198.51.100.96", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 20, "computer_id": 9, "hostname": "HOST-9211", "event_type_id": 7, "event_code": "1102", "channel": "Security", "category": "audit_log_cleared", "logged_at": "2025-03-10 12:59:58", "account_id": 6, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 21, "computer_id": 35, "hostname": "HOST-5770", "event_type_id": 2, "event_code": "4625", "channel": "Security", "category": "logon_failure", "logged_at": "2025-03-10 15:59:20", "account_id": 93, "logon_type": "2", "source_ip": "198.51.100.106", "failure_reason": "bad_password", "process_name": null, "service_name": null }, { "id": 22, "computer_id": 20, "hostname": "HOST-9003", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 23:55:59", "account_id": 27, "logon_type": "10", "source_ip": "192.0.2.119", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 23, "computer_id": 15, "hostname": "HOST-8606", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-11 10:01:52", "account_id": 48, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 24, "computer_id": 9, "hostname": "HOST-9211", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 13:32:15", "account_id": 42, "logon_type": "3", "source_ip": "192.0.2.252", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 25, "computer_id": 34, "hostname": "HOST-9673", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-11 13:28:51", "account_id": 56, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 26, "computer_id": 15, "hostname": "HOST-8606", "event_type_id": 5, "event_code": "4672", "channel": "Security", "category": "special_privileges", "logged_at": "2025-03-11 10:09:38", "account_id": 54, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 27, "computer_id": 15, "hostname": "HOST-8606", "event_type_id": 2, "event_code": "4625", "channel": "Security", "category": "logon_failure", "logged_at": "2025-03-11 10:28:57", "account_id": 62, "logon_type": "2", "source_ip": "203.0.113.214", "failure_reason": "bad_password", "process_name": null, "service_name": null }, { "id": 28, "computer_id": 22, "hostname": "HOST-8193", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-11 15:39:25", "account_id": 95, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 29, "computer_id": 26, "hostname": "HOST-7087", "event_type_id": 2, "event_code": "4625", "channel": "Security", "category": "logon_failure", "logged_at": "2025-03-10 16:09:55", "account_id": 49, "logon_type": "2", "source_ip": "192.0.2.23", "failure_reason": "bad_password", "process_name": null, "service_name": null }, { "id": 30, "computer_id": 32, "hostname": "HOST-8387", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-11 16:03:16", "account_id": 76, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 31, "computer_id": 34, "hostname": "HOST-9673", "event_type_id": 10, "event_code": "6005", "channel": "System", "category": "event_log_started", "logged_at": "2025-03-11 13:48:54", "account_id": null, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 32, "computer_id": 31, "hostname": "HOST-8967", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-10 15:31:25", "account_id": 62, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 33, "computer_id": 35, "hostname": "HOST-5770", "event_type_id": 8, "event_code": "7036", "channel": "System", "category": "service_state_changed", "logged_at": "2025-03-10 16:35:11", "account_id": null, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": "RemoteRegistry" }, { "id": 34, "computer_id": 5, "hostname": "HOST-5541", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 16:24:08", "account_id": 107, "logon_type": "2", "source_ip": "192.0.2.238", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 35, "computer_id": 28, "hostname": "HOST-2180", "event_type_id": 5, "event_code": "4672", "channel": "Security", "category": "special_privileges", "logged_at": "2025-03-11 17:21:47", "account_id": 104, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 36, "computer_id": 15, "hostname": "HOST-8606", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-11 10:48:27", "account_id": 31, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "msedge.exe", "service_name": null }, { "id": 37, "computer_id": 22, "hostname": "HOST-8193", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-11 15:51:31", "account_id": 37, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 38, "computer_id": 27, "hostname": "HOST-4857", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-11 10:39:32", "account_id": 40, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 39, "computer_id": 9, "hostname": "HOST-9211", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 13:38:52", "account_id": 23, "logon_type": "10", "source_ip": "203.0.113.249", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 40, "computer_id": 16, "hostname": "HOST-6772", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-11 10:19:10", "account_id": 71, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "powershell.exe", "service_name": null }, { "id": 41, "computer_id": 10, "hostname": "HOST-9244", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-10 08:51:49", "account_id": 12, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 42, "computer_id": 11, "hostname": "HOST-2873", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 18:13:19", "account_id": 72, "logon_type": "3", "source_ip": "198.51.100.203", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 43, "computer_id": 28, "hostname": "HOST-2180", "event_type_id": 2, "event_code": "4625", "channel": "Security", "category": "logon_failure", "logged_at": "2025-03-11 17:55:04", "account_id": 2, "logon_type": "3", "source_ip": "192.0.2.7", "failure_reason": "bad_password", "process_name": null, "service_name": null }, { "id": 44, "computer_id": 36, "hostname": "HOST-2105", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-10 11:34:23", "account_id": 110, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 45, "computer_id": 19, "hostname": "HOST-2115", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 13:15:43", "account_id": 12, "logon_type": "2", "source_ip": "203.0.113.31", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 46, "computer_id": 26, "hostname": "HOST-7087", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-10 16:37:26", "account_id": 98, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "msedge.exe", "service_name": null }, { "id": 47, "computer_id": 5, "hostname": "HOST-5541", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-11 16:49:28", "account_id": 83, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 48, "computer_id": 26, "hostname": "HOST-7087", "event_type_id": 4, "event_code": "4648", "channel": "Security", "category": "explicit_credentials", "logged_at": "2025-03-10 17:16:36", "account_id": 52, "logon_type": null, "source_ip": "198.51.100.17", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 49, "computer_id": 8, "hostname": "HOST-5603", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-10 11:49:34", "account_id": 35, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 50, "computer_id": 26, "hostname": "HOST-7087", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 17:51:28", "account_id": 62, "logon_type": "2", "source_ip": "203.0.113.230", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 51, "computer_id": 20, "hostname": "HOST-9003", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-11 00:08:33", "account_id": 20, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 52, "computer_id": 30, "hostname": "HOST-2960", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-10 13:46:52", "account_id": 34, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "cmd.exe", "service_name": null }, { "id": 53, "computer_id": 35, "hostname": "HOST-5770", "event_type_id": 4, "event_code": "4648", "channel": "Security", "category": "explicit_credentials", "logged_at": "2025-03-10 16:43:02", "account_id": 70, "logon_type": null, "source_ip": "203.0.113.77", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 54, "computer_id": 8, "hostname": "HOST-5603", "event_type_id": 5, "event_code": "4672", "channel": "Security", "category": "special_privileges", "logged_at": "2025-03-10 11:56:46", "account_id": 67, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 55, "computer_id": 14, "hostname": "HOST-7073", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 15:00:30", "account_id": 71, "logon_type": "5", "source_ip": "192.0.2.8", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 56, "computer_id": 21, "hostname": "HOST-8543", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 06:02:25", "account_id": 67, "logon_type": "2", "source_ip": "198.51.100.60", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 57, "computer_id": 20, "hostname": "HOST-9003", "event_type_id": 5, "event_code": "4672", "channel": "Security", "category": "special_privileges", "logged_at": "2025-03-11 00:12:20", "account_id": 41, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 58, "computer_id": 22, "hostname": "HOST-8193", "event_type_id": 2, "event_code": "4625", "channel": "Security", "category": "logon_failure", "logged_at": "2025-03-11 16:14:32", "account_id": 21, "logon_type": "2", "source_ip": "203.0.113.121", "failure_reason": "account_disabled", "process_name": null, "service_name": null }, { "id": 59, "computer_id": 35, "hostname": "HOST-5770", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-10 17:17:41", "account_id": 109, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "svchost.exe", "service_name": null }, { "id": 60, "computer_id": 15, "hostname": "HOST-8606", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-11 11:18:06", "account_id": 10, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 61, "computer_id": 36, "hostname": "HOST-2105", "event_type_id": 5, "event_code": "4672", "channel": "Security", "category": "special_privileges", "logged_at": "2025-03-10 12:14:45", "account_id": 92, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 62, "computer_id": 28, "hostname": "HOST-2180", "event_type_id": 4, "event_code": "4648", "channel": "Security", "category": "explicit_credentials", "logged_at": "2025-03-11 18:14:42", "account_id": 36, "logon_type": null, "source_ip": "198.51.100.57", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 63, "computer_id": 30, "hostname": "HOST-2960", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-10 14:15:45", "account_id": 21, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 64, "computer_id": 22, "hostname": "HOST-8193", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-11 16:35:36", "account_id": 11, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "svchost.exe", "service_name": null }, { "id": 65, "computer_id": 18, "hostname": "HOST-0775", "event_type_id": 4, "event_code": "4648", "channel": "Security", "category": "explicit_credentials", "logged_at": "2025-03-11 13:58:07", "account_id": 34, "logon_type": null, "source_ip": "192.0.2.100", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 66, "computer_id": 30, "hostname": "HOST-2960", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 14:18:57", "account_id": 13, "logon_type": "2", "source_ip": "203.0.113.17", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 67, "computer_id": 16, "hostname": "HOST-6772", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-11 10:44:49", "account_id": 98, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "svchost.exe", "service_name": null }, { "id": 68, "computer_id": 14, "hostname": "HOST-7073", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-10 15:25:42", "account_id": 92, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 69, "computer_id": 23, "hostname": "HOST-1933", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 16:30:21", "account_id": 37, "logon_type": "3", "source_ip": "192.0.2.32", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 70, "computer_id": 3, "hostname": "HOST-6177", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 17:27:18", "account_id": 87, "logon_type": "10", "source_ip": "198.51.100.4", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 71, "computer_id": 11, "hostname": "HOST-2873", "event_type_id": 2, "event_code": "4625", "channel": "Security", "category": "logon_failure", "logged_at": "2025-03-10 18:30:48", "account_id": 81, "logon_type": "3", "source_ip": "203.0.113.151", "failure_reason": "bad_password", "process_name": null, "service_name": null }, { "id": 72, "computer_id": 36, "hostname": "HOST-2105", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 12:48:57", "account_id": 50, "logon_type": "2", "source_ip": "203.0.113.176", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 73, "computer_id": 16, "hostname": "HOST-6772", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-11 11:20:36", "account_id": 37, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "cmd.exe", "service_name": null }, { "id": 74, "computer_id": 12, "hostname": "HOST-1854", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 07:28:08", "account_id": 74, "logon_type": "3", "source_ip": "198.51.100.31", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 75, "computer_id": 22, "hostname": "HOST-8193", "event_type_id": 4, "event_code": "4648", "channel": "Security", "category": "explicit_credentials", "logged_at": "2025-03-11 16:45:06", "account_id": 29, "logon_type": null, "source_ip": "192.0.2.97", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 76, "computer_id": 27, "hostname": "HOST-4857", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 10:45:38", "account_id": 95, "logon_type": "2", "source_ip": "203.0.113.11", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 77, "computer_id": 19, "hostname": "HOST-2115", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-11 13:33:31", "account_id": 3, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "svchost.exe", "service_name": null }, { "id": 78, "computer_id": 14, "hostname": "HOST-7073", "event_type_id": 2, "event_code": "4625", "channel": "Security", "category": "logon_failure", "logged_at": "2025-03-10 15:47:19", "account_id": 3, "logon_type": "3", "source_ip": "203.0.113.133", "failure_reason": "bad_password", "process_name": null, "service_name": null }, { "id": 79, "computer_id": 7, "hostname": "HOST-5690", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 17:54:39", "account_id": 51, "logon_type": "5", "source_ip": "192.0.2.199", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 80, "computer_id": 36, "hostname": "HOST-2105", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-10 13:10:23", "account_id": 47, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "msedge.exe", "service_name": null }, { "id": 81, "computer_id": 36, "hostname": "HOST-2105", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-10 13:28:48", "account_id": 34, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "cmd.exe", "service_name": null }, { "id": 82, "computer_id": 32, "hostname": "HOST-8387", "event_type_id": 5, "event_code": "4672", "channel": "Security", "category": "special_privileges", "logged_at": "2025-03-11 16:18:44", "account_id": 29, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 83, "computer_id": 30, "hostname": "HOST-2960", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-10 14:42:29", "account_id": 65, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "svchost.exe", "service_name": null }, { "id": 84, "computer_id": 35, "hostname": "HOST-5770", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-10 17:36:53", "account_id": 3, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "wmic.exe", "service_name": null }, { "id": 85, "computer_id": 9, "hostname": "HOST-9211", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-10 14:04:15", "account_id": 93, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 86, "computer_id": 22, "hostname": "HOST-8193", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 17:13:48", "account_id": 95, "logon_type": "3", "source_ip": "198.51.100.171", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 87, "computer_id": 9, "hostname": "HOST-9211", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-10 14:42:52", "account_id": 109, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 88, "computer_id": 31, "hostname": "HOST-8967", "event_type_id": 4, "event_code": "4648", "channel": "Security", "category": "explicit_credentials", "logged_at": "2025-03-10 16:05:59", "account_id": 38, "logon_type": null, "source_ip": "198.51.100.206", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 89, "computer_id": 36, "hostname": "HOST-2105", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-10 14:02:47", "account_id": 56, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "powershell.exe", "service_name": null }, { "id": 90, "computer_id": 22, "hostname": "HOST-8193", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 17:19:53", "account_id": 23, "logon_type": "3", "source_ip": "192.0.2.104", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 91, "computer_id": 25, "hostname": "HOST-6664", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 08:44:54", "account_id": 30, "logon_type": "3", "source_ip": "198.51.100.172", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 92, "computer_id": 9, "hostname": "HOST-9211", "event_type_id": 5, "event_code": "4672", "channel": "Security", "category": "special_privileges", "logged_at": "2025-03-10 15:07:57", "account_id": 87, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 93, "computer_id": 9, "hostname": "HOST-9211", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-10 15:48:21", "account_id": 59, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "msedge.exe", "service_name": null }, { "id": 94, "computer_id": 15, "hostname": "HOST-8606", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-11 11:29:26", "account_id": 23, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "msedge.exe", "service_name": null }, { "id": 95, "computer_id": 27, "hostname": "HOST-4857", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 11:18:33", "account_id": 43, "logon_type": "2", "source_ip": "203.0.113.168", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 96, "computer_id": 9, "hostname": "HOST-9211", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 16:10:40", "account_id": 64, "logon_type": "3", "source_ip": "192.0.2.245", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 97, "computer_id": 32, "hostname": "HOST-8387", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 16:54:16", "account_id": 13, "logon_type": "2", "source_ip": "198.51.100.91", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 98, "computer_id": 18, "hostname": "HOST-0775", "event_type_id": 2, "event_code": "4625", "channel": "Security", "category": "logon_failure", "logged_at": "2025-03-11 14:28:02", "account_id": 84, "logon_type": "2", "source_ip": "198.51.100.1", "failure_reason": "bad_password", "process_name": null, "service_name": null }, { "id": 99, "computer_id": 24, "hostname": "HOST-3903", "event_type_id": 4, "event_code": "4648", "channel": "Security", "category": "explicit_credentials", "logged_at": "2025-03-10 12:42:08", "account_id": 52, "logon_type": null, "source_ip": "203.0.113.228", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 100, "computer_id": 5, "hostname": "HOST-5541", "event_type_id": 2, "event_code": "4625", "channel": "Security", "category": "logon_failure", "logged_at": "2025-03-11 17:29:39", "account_id": 86, "logon_type": "3", "source_ip": "192.0.2.252", "failure_reason": "outside_logon_hours", "process_name": null, "service_name": null }, { "id": 101, "computer_id": 8, "hostname": "HOST-5603", "event_type_id": 2, "event_code": "4625", "channel": "Security", "category": "logon_failure", "logged_at": "2025-03-10 12:29:41", "account_id": 30, "logon_type": "3", "source_ip": "203.0.113.26", "failure_reason": "bad_password", "process_name": null, "service_name": null }, { "id": 102, "computer_id": 16, "hostname": "HOST-6772", "event_type_id": 8, "event_code": "7036", "channel": "System", "category": "service_state_changed", "logged_at": "2025-03-11 11:25:26", "account_id": null, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": "WinDefend" }, { "id": 103, "computer_id": 23, "hostname": "HOST-1933", "event_type_id": 4, "event_code": "4648", "channel": "Security", "category": "explicit_credentials", "logged_at": "2025-03-10 16:53:56", "account_id": 79, "logon_type": null, "source_ip": "192.0.2.39", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 104, "computer_id": 29, "hostname": "HOST-8568", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 08:13:55", "account_id": 46, "logon_type": "2", "source_ip": "192.0.2.188", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 105, "computer_id": 16, "hostname": "HOST-6772", "event_type_id": 8, "event_code": "7036", "channel": "System", "category": "service_state_changed", "logged_at": "2025-03-11 11:35:16", "account_id": null, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": "RemoteRegistry" }, { "id": 106, "computer_id": 17, "hostname": "HOST-9373", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-11 13:01:59", "account_id": 43, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 107, "computer_id": 13, "hostname": "HOST-5961", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-10 10:59:30", "account_id": 80, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "cmd.exe", "service_name": null }, { "id": 108, "computer_id": 34, "hostname": "HOST-9673", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 13:52:41", "account_id": 94, "logon_type": "3", "source_ip": "192.0.2.151", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 109, "computer_id": 15, "hostname": "HOST-8606", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 11:31:16", "account_id": 24, "logon_type": "3", "source_ip": "203.0.113.145", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 110, "computer_id": 15, "hostname": "HOST-8606", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 11:45:40", "account_id": 28, "logon_type": "5", "source_ip": "192.0.2.26", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 111, "computer_id": 13, "hostname": "HOST-5961", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-10 11:16:54", "account_id": 98, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 112, "computer_id": 7, "hostname": "HOST-5690", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 18:22:14", "account_id": 101, "logon_type": "2", "source_ip": "192.0.2.134", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 113, "computer_id": 11, "hostname": "HOST-2873", "event_type_id": 8, "event_code": "7036", "channel": "System", "category": "service_state_changed", "logged_at": "2025-03-10 18:34:13", "account_id": null, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": "wuauserv" }, { "id": 114, "computer_id": 15, "hostname": "HOST-8606", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-11 12:05:31", "account_id": 66, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 115, "computer_id": 8, "hostname": "HOST-5603", "event_type_id": 2, "event_code": "4625", "channel": "Security", "category": "logon_failure", "logged_at": "2025-03-10 12:48:31", "account_id": 2, "logon_type": "2", "source_ip": "203.0.113.253", "failure_reason": "bad_password", "process_name": null, "service_name": null }, { "id": 116, "computer_id": 4, "hostname": "HOST-1832", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-10 11:00:03", "account_id": 110, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "msedge.exe", "service_name": null }, { "id": 117, "computer_id": 18, "hostname": "HOST-0775", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-11 14:29:12", "account_id": 56, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 118, "computer_id": 29, "hostname": "HOST-8568", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-11 08:15:51", "account_id": 65, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "msedge.exe", "service_name": null }, { "id": 119, "computer_id": 35, "hostname": "HOST-5770", "event_type_id": 10, "event_code": "6005", "channel": "System", "category": "event_log_started", "logged_at": "2025-03-10 17:41:26", "account_id": null, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 120, "computer_id": 25, "hostname": "HOST-6664", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-11 09:18:24", "account_id": 53, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "rundll32.exe", "service_name": null }, { "id": 121, "computer_id": 22, "hostname": "HOST-8193", "event_type_id": 4, "event_code": "4648", "channel": "Security", "category": "explicit_credentials", "logged_at": "2025-03-11 17:53:18", "account_id": 43, "logon_type": null, "source_ip": "192.0.2.164", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 122, "computer_id": 30, "hostname": "HOST-2960", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 14:53:09", "account_id": 85, "logon_type": "10", "source_ip": "198.51.100.246", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 123, "computer_id": 3, "hostname": "HOST-6177", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-10 17:42:46", "account_id": 86, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 124, "computer_id": 33, "hostname": "HOST-4501", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-10 20:26:29", "account_id": 99, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 125, "computer_id": 33, "hostname": "HOST-4501", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-10 20:44:08", "account_id": 51, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 126, "computer_id": 20, "hostname": "HOST-9003", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 00:20:11", "account_id": 95, "logon_type": "2", "source_ip": "192.0.2.234", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 127, "computer_id": 26, "hostname": "HOST-7087", "event_type_id": 2, "event_code": "4625", "channel": "Security", "category": "logon_failure", "logged_at": "2025-03-10 18:28:14", "account_id": 24, "logon_type": "2", "source_ip": "198.51.100.211", "failure_reason": "password_expired", "process_name": null, "service_name": null }, { "id": 128, "computer_id": 15, "hostname": "HOST-8606", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-11 12:18:41", "account_id": 18, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "powershell.exe", "service_name": null }, { "id": 129, "computer_id": 2, "hostname": "HOST-4236", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-11 14:56:13", "account_id": 51, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 130, "computer_id": 36, "hostname": "HOST-2105", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 14:34:50", "account_id": 61, "logon_type": "2", "source_ip": "192.0.2.175", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 131, "computer_id": 26, "hostname": "HOST-7087", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-10 18:42:38", "account_id": 2, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 132, "computer_id": 34, "hostname": "HOST-9673", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-11 14:01:26", "account_id": 58, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "msedge.exe", "service_name": null }, { "id": 133, "computer_id": 17, "hostname": "HOST-9373", "event_type_id": 8, "event_code": "7036", "channel": "System", "category": "service_state_changed", "logged_at": "2025-03-11 13:30:42", "account_id": null, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": "wuauserv" }, { "id": 134, "computer_id": 10, "hostname": "HOST-9244", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-10 09:03:25", "account_id": 9, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "svchost.exe", "service_name": null }, { "id": 135, "computer_id": 11, "hostname": "HOST-2873", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-10 18:40:52", "account_id": 33, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 136, "computer_id": 36, "hostname": "HOST-2105", "event_type_id": 5, "event_code": "4672", "channel": "Security", "category": "special_privileges", "logged_at": "2025-03-10 14:54:22", "account_id": 65, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 137, "computer_id": 36, "hostname": "HOST-2105", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 15:31:39", "account_id": 66, "logon_type": "3", "source_ip": "198.51.100.215", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 138, "computer_id": 31, "hostname": "HOST-8967", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 16:46:23", "account_id": 103, "logon_type": "3", "source_ip": "203.0.113.184", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 139, "computer_id": 6, "hostname": "HOST-1215", "event_type_id": 4, "event_code": "4648", "channel": "Security", "category": "explicit_credentials", "logged_at": "2025-03-11 11:02:06", "account_id": 96, "logon_type": null, "source_ip": "192.0.2.156", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 140, "computer_id": 26, "hostname": "HOST-7087", "event_type_id": 2, "event_code": "4625", "channel": "Security", "category": "logon_failure", "logged_at": "2025-03-10 19:09:01", "account_id": 95, "logon_type": "2", "source_ip": "192.0.2.84", "failure_reason": "bad_password", "process_name": null, "service_name": null }, { "id": 141, "computer_id": 24, "hostname": "HOST-3903", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 13:03:41", "account_id": 81, "logon_type": "5", "source_ip": "192.0.2.111", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 142, "computer_id": 14, "hostname": "HOST-7073", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-10 16:09:04", "account_id": 35, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "msedge.exe", "service_name": null }, { "id": 143, "computer_id": 9, "hostname": "HOST-9211", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 16:12:33", "account_id": 71, "logon_type": "2", "source_ip": "198.51.100.110", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 144, "computer_id": 36, "hostname": "HOST-2105", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 15:45:20", "account_id": 54, "logon_type": "3", "source_ip": "198.51.100.74", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 145, "computer_id": 28, "hostname": "HOST-2180", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-11 18:46:51", "account_id": 91, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 146, "computer_id": 35, "hostname": "HOST-5770", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 17:48:47", "account_id": 9, "logon_type": "2", "source_ip": "192.0.2.40", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 147, "computer_id": 5, "hostname": "HOST-5541", "event_type_id": 8, "event_code": "7036", "channel": "System", "category": "service_state_changed", "logged_at": "2025-03-11 18:06:20", "account_id": null, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": "Spooler" }, { "id": 148, "computer_id": 22, "hostname": "HOST-8193", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 18:14:34", "account_id": 3, "logon_type": "10", "source_ip": "203.0.113.79", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 149, "computer_id": 15, "hostname": "HOST-8606", "event_type_id": 2, "event_code": "4625", "channel": "Security", "category": "logon_failure", "logged_at": "2025-03-11 12:30:27", "account_id": 79, "logon_type": "2", "source_ip": "192.0.2.52", "failure_reason": "bad_password", "process_name": null, "service_name": null }, { "id": 150, "computer_id": 36, "hostname": "HOST-2105", "event_type_id": 8, "event_code": "7036", "channel": "System", "category": "service_state_changed", "logged_at": "2025-03-10 15:56:10", "account_id": null, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": "Spooler" }, { "id": 151, "computer_id": 30, "hostname": "HOST-2960", "event_type_id": 5, "event_code": "4672", "channel": "Security", "category": "special_privileges", "logged_at": "2025-03-10 15:06:58", "account_id": 76, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 152, "computer_id": 20, "hostname": "HOST-9003", "event_type_id": 5, "event_code": "4672", "channel": "Security", "category": "special_privileges", "logged_at": "2025-03-11 00:34:03", "account_id": 87, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 153, "computer_id": 5, "hostname": "HOST-5541", "event_type_id": 5, "event_code": "4672", "channel": "Security", "category": "special_privileges", "logged_at": "2025-03-11 18:34:54", "account_id": 57, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 154, "computer_id": 19, "hostname": "HOST-2115", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-11 13:54:10", "account_id": 34, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "rundll32.exe", "service_name": null }, { "id": 155, "computer_id": 36, "hostname": "HOST-2105", "event_type_id": 2, "event_code": "4625", "channel": "Security", "category": "logon_failure", "logged_at": "2025-03-10 16:24:25", "account_id": 23, "logon_type": "2", "source_ip": "198.51.100.113", "failure_reason": "bad_password", "process_name": null, "service_name": null }, { "id": 156, "computer_id": 36, "hostname": "HOST-2105", "event_type_id": 5, "event_code": "4672", "channel": "Security", "category": "special_privileges", "logged_at": "2025-03-10 16:46:41", "account_id": 31, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 157, "computer_id": 24, "hostname": "HOST-3903", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-10 13:08:04", "account_id": 7, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "svchost.exe", "service_name": null }, { "id": 158, "computer_id": 28, "hostname": "HOST-2180", "event_type_id": 2, "event_code": "4625", "channel": "Security", "category": "logon_failure", "logged_at": "2025-03-11 19:11:14", "account_id": 97, "logon_type": "3", "source_ip": "192.0.2.236", "failure_reason": "outside_logon_hours", "process_name": null, "service_name": null }, { "id": 159, "computer_id": 26, "hostname": "HOST-7087", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 19:11:42", "account_id": 47, "logon_type": "3", "source_ip": "192.0.2.5", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 160, "computer_id": 5, "hostname": "HOST-5541", "event_type_id": 8, "event_code": "7036", "channel": "System", "category": "service_state_changed", "logged_at": "2025-03-11 18:49:26", "account_id": null, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": "Spooler" }, { "id": 161, "computer_id": 22, "hostname": "HOST-8193", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 18:43:50", "account_id": 35, "logon_type": "2", "source_ip": "203.0.113.15", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 162, "computer_id": 26, "hostname": "HOST-7087", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-10 19:34:31", "account_id": 58, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "msedge.exe", "service_name": null }, { "id": 163, "computer_id": 19, "hostname": "HOST-2115", "event_type_id": 2, "event_code": "4625", "channel": "Security", "category": "logon_failure", "logged_at": "2025-03-11 14:25:28", "account_id": 106, "logon_type": "2", "source_ip": "198.51.100.1", "failure_reason": "bad_password", "process_name": null, "service_name": null }, { "id": 164, "computer_id": 22, "hostname": "HOST-8193", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-11 18:49:29", "account_id": 95, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "msedge.exe", "service_name": null }, { "id": 165, "computer_id": 17, "hostname": "HOST-9373", "event_type_id": 8, "event_code": "7036", "channel": "System", "category": "service_state_changed", "logged_at": "2025-03-11 14:05:29", "account_id": null, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": "Spooler" }, { "id": 166, "computer_id": 9, "hostname": "HOST-9211", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 16:49:56", "account_id": 21, "logon_type": "3", "source_ip": "198.51.100.158", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 167, "computer_id": 35, "hostname": "HOST-5770", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-10 18:29:03", "account_id": 91, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "msedge.exe", "service_name": null }, { "id": 168, "computer_id": 31, "hostname": "HOST-8967", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-10 17:08:13", "account_id": 81, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "cmd.exe", "service_name": null }, { "id": 169, "computer_id": 29, "hostname": "HOST-8568", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 08:48:05", "account_id": 25, "logon_type": "3", "source_ip": "203.0.113.221", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 170, "computer_id": 16, "hostname": "HOST-6772", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-11 11:59:58", "account_id": 8, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 171, "computer_id": 19, "hostname": "HOST-2115", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 14:34:18", "account_id": 86, "logon_type": "2", "source_ip": "203.0.113.10", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 172, "computer_id": 5, "hostname": "HOST-5541", "event_type_id": 9, "event_code": "7045", "channel": "System", "category": "service_installed", "logged_at": "2025-03-11 19:04:20", "account_id": null, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": "PSEXESVC" }, { "id": 173, "computer_id": 28, "hostname": "HOST-2180", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-11 19:51:01", "account_id": 53, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "wmic.exe", "service_name": null }, { "id": 174, "computer_id": 28, "hostname": "HOST-2180", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 20:05:58", "account_id": 74, "logon_type": "10", "source_ip": "198.51.100.252", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 175, "computer_id": 17, "hostname": "HOST-9373", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-11 14:43:21", "account_id": 78, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 176, "computer_id": 35, "hostname": "HOST-5770", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 19:05:52", "account_id": 51, "logon_type": "3", "source_ip": "203.0.113.53", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 177, "computer_id": 29, "hostname": "HOST-8568", "event_type_id": 8, "event_code": "7036", "channel": "System", "category": "service_state_changed", "logged_at": "2025-03-11 09:09:16", "account_id": null, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": "BITS" }, { "id": 178, "computer_id": 35, "hostname": "HOST-5770", "event_type_id": 10, "event_code": "6005", "channel": "System", "category": "event_log_started", "logged_at": "2025-03-10 19:12:32", "account_id": null, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 179, "computer_id": 11, "hostname": "HOST-2873", "event_type_id": 5, "event_code": "4672", "channel": "Security", "category": "special_privileges", "logged_at": "2025-03-10 19:19:21", "account_id": 64, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 180, "computer_id": 30, "hostname": "HOST-2960", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 15:10:18", "account_id": 15, "logon_type": "5", "source_ip": "203.0.113.248", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 181, "computer_id": 15, "hostname": "HOST-8606", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 13:00:58", "account_id": 32, "logon_type": "2", "source_ip": "198.51.100.229", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 182, "computer_id": 22, "hostname": "HOST-8193", "event_type_id": 2, "event_code": "4625", "channel": "Security", "category": "logon_failure", "logged_at": "2025-03-11 19:02:48", "account_id": 5, "logon_type": "3", "source_ip": "192.0.2.123", "failure_reason": "password_expired", "process_name": null, "service_name": null }, { "id": 183, "computer_id": 9, "hostname": "HOST-9211", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-10 17:18:22", "account_id": 38, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 184, "computer_id": 28, "hostname": "HOST-2180", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 20:43:00", "account_id": 16, "logon_type": "3", "source_ip": "192.0.2.151", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 185, "computer_id": 24, "hostname": "HOST-3903", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-10 13:14:08", "account_id": 51, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 186, "computer_id": 26, "hostname": "HOST-7087", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-10 20:13:36", "account_id": 20, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 187, "computer_id": 30, "hostname": "HOST-2960", "event_type_id": 5, "event_code": "4672", "channel": "Security", "category": "special_privileges", "logged_at": "2025-03-10 15:43:41", "account_id": 1, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 188, "computer_id": 4, "hostname": "HOST-1832", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 11:18:04", "account_id": 43, "logon_type": "3", "source_ip": "198.51.100.142", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 189, "computer_id": 29, "hostname": "HOST-8568", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 09:23:12", "account_id": 71, "logon_type": "2", "source_ip": "198.51.100.219", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 190, "computer_id": 19, "hostname": "HOST-2115", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-11 14:37:24", "account_id": 23, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 191, "computer_id": 9, "hostname": "HOST-9211", "event_type_id": 10, "event_code": "6005", "channel": "System", "category": "event_log_started", "logged_at": "2025-03-10 17:53:33", "account_id": null, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 192, "computer_id": 30, "hostname": "HOST-2960", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-10 16:06:43", "account_id": 38, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 193, "computer_id": 22, "hostname": "HOST-8193", "event_type_id": 8, "event_code": "7036", "channel": "System", "category": "service_state_changed", "logged_at": "2025-03-11 19:37:05", "account_id": null, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": "Spooler" }, { "id": 194, "computer_id": 22, "hostname": "HOST-8193", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 20:14:37", "account_id": 20, "logon_type": "2", "source_ip": "198.51.100.232", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 195, "computer_id": 12, "hostname": "HOST-1854", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-10 07:29:37", "account_id": 1, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 196, "computer_id": 30, "hostname": "HOST-2960", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-10 16:37:06", "account_id": 32, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 197, "computer_id": 34, "hostname": "HOST-9673", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-11 14:24:08", "account_id": 76, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 198, "computer_id": 36, "hostname": "HOST-2105", "event_type_id": 2, "event_code": "4625", "channel": "Security", "category": "logon_failure", "logged_at": "2025-03-10 17:15:50", "account_id": 59, "logon_type": "3", "source_ip": "192.0.2.72", "failure_reason": "password_expired", "process_name": null, "service_name": null }, { "id": 199, "computer_id": 30, "hostname": "HOST-2960", "event_type_id": 2, "event_code": "4625", "channel": "Security", "category": "logon_failure", "logged_at": "2025-03-10 16:52:13", "account_id": 92, "logon_type": "3", "source_ip": "192.0.2.88", "failure_reason": "outside_logon_hours", "process_name": null, "service_name": null }, { "id": 200, "computer_id": 10, "hostname": "HOST-9244", "event_type_id": 4, "event_code": "4648", "channel": "Security", "category": "explicit_credentials", "logged_at": "2025-03-10 09:24:43", "account_id": 99, "logon_type": null, "source_ip": "203.0.113.229", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 201, "computer_id": 16, "hostname": "HOST-6772", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 12:19:12", "account_id": 75, "logon_type": "3", "source_ip": "198.51.100.107", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 202, "computer_id": 5, "hostname": "HOST-5541", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-11 19:25:49", "account_id": 57, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 203, "computer_id": 17, "hostname": "HOST-9373", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 14:56:51", "account_id": 89, "logon_type": "3", "source_ip": "203.0.113.189", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 204, "computer_id": 27, "hostname": "HOST-4857", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-11 11:53:04", "account_id": 86, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 205, "computer_id": 35, "hostname": "HOST-5770", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-10 19:31:59", "account_id": 3, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "msedge.exe", "service_name": null }, { "id": 206, "computer_id": 24, "hostname": "HOST-3903", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 13:42:43", "account_id": 27, "logon_type": "2", "source_ip": "192.0.2.159", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 207, "computer_id": 22, "hostname": "HOST-8193", "event_type_id": 8, "event_code": "7036", "channel": "System", "category": "service_state_changed", "logged_at": "2025-03-11 20:47:53", "account_id": null, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": "WinDefend" }, { "id": 208, "computer_id": 12, "hostname": "HOST-1854", "event_type_id": 2, "event_code": "4625", "channel": "Security", "category": "logon_failure", "logged_at": "2025-03-10 07:57:50", "account_id": 33, "logon_type": "2", "source_ip": "203.0.113.79", "failure_reason": "bad_password", "process_name": null, "service_name": null }, { "id": 209, "computer_id": 15, "hostname": "HOST-8606", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-11 13:28:56", "account_id": 86, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 210, "computer_id": 8, "hostname": "HOST-5603", "event_type_id": 8, "event_code": "7036", "channel": "System", "category": "service_state_changed", "logged_at": "2025-03-10 13:27:21", "account_id": null, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": "WinDefend" }, { "id": 211, "computer_id": 16, "hostname": "HOST-6772", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 12:28:48", "account_id": 108, "logon_type": "3", "source_ip": "198.51.100.6", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 212, "computer_id": 35, "hostname": "HOST-5770", "event_type_id": 8, "event_code": "7036", "channel": "System", "category": "service_state_changed", "logged_at": "2025-03-10 19:36:51", "account_id": null, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": "wuauserv" }, { "id": 213, "computer_id": 16, "hostname": "HOST-6772", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-11 12:53:57", "account_id": 105, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 214, "computer_id": 8, "hostname": "HOST-5603", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-10 13:59:38", "account_id": 64, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 215, "computer_id": 35, "hostname": "HOST-5770", "event_type_id": 2, "event_code": "4625", "channel": "Security", "category": "logon_failure", "logged_at": "2025-03-10 19:39:02", "account_id": 102, "logon_type": "5", "source_ip": "192.0.2.232", "failure_reason": "bad_password", "process_name": null, "service_name": null }, { "id": 216, "computer_id": 11, "hostname": "HOST-2873", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 19:44:39", "account_id": 66, "logon_type": "10", "source_ip": "203.0.113.29", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 217, "computer_id": 10, "hostname": "HOST-9244", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-10 09:56:42", "account_id": 75, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "rundll32.exe", "service_name": null }, { "id": 218, "computer_id": 20, "hostname": "HOST-9003", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 01:03:05", "account_id": 108, "logon_type": "3", "source_ip": "192.0.2.52", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 219, "computer_id": 3, "hostname": "HOST-6177", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 17:49:47", "account_id": 17, "logon_type": "3", "source_ip": "192.0.2.175", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 220, "computer_id": 21, "hostname": "HOST-8543", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 06:41:27", "account_id": 51, "logon_type": "3", "source_ip": "203.0.113.83", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 221, "computer_id": 17, "hostname": "HOST-9373", "event_type_id": 2, "event_code": "4625", "channel": "Security", "category": "logon_failure", "logged_at": "2025-03-11 15:02:44", "account_id": 8, "logon_type": "2", "source_ip": "192.0.2.161", "failure_reason": "bad_password", "process_name": null, "service_name": null }, { "id": 222, "computer_id": 15, "hostname": "HOST-8606", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 14:05:59", "account_id": 52, "logon_type": "10", "source_ip": "198.51.100.91", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 223, "computer_id": 33, "hostname": "HOST-4501", "event_type_id": 5, "event_code": "4672", "channel": "Security", "category": "special_privileges", "logged_at": "2025-03-10 20:54:00", "account_id": 39, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 224, "computer_id": 10, "hostname": "HOST-9244", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 09:58:08", "account_id": 6, "logon_type": "3", "source_ip": "203.0.113.36", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 225, "computer_id": 28, "hostname": "HOST-2180", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-11 21:13:14", "account_id": 90, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 226, "computer_id": 21, "hostname": "HOST-8543", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-11 06:55:47", "account_id": 67, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 227, "computer_id": 6, "hostname": "HOST-1215", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-11 11:16:44", "account_id": 35, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 228, "computer_id": 26, "hostname": "HOST-7087", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 20:17:35", "account_id": 28, "logon_type": "3", "source_ip": "198.51.100.4", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 229, "computer_id": 26, "hostname": "HOST-7087", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 20:23:12", "account_id": 11, "logon_type": "2", "source_ip": "192.0.2.1", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 230, "computer_id": 13, "hostname": "HOST-5961", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 11:39:42", "account_id": 26, "logon_type": "2", "source_ip": "198.51.100.253", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 231, "computer_id": 25, "hostname": "HOST-6664", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 09:42:19", "account_id": 70, "logon_type": "3", "source_ip": "198.51.100.254", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 232, "computer_id": 26, "hostname": "HOST-7087", "event_type_id": 9, "event_code": "7045", "channel": "System", "category": "service_installed", "logged_at": "2025-03-10 20:44:53", "account_id": null, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": "Spooler" }, { "id": 233, "computer_id": 28, "hostname": "HOST-2180", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 21:29:16", "account_id": 24, "logon_type": "5", "source_ip": "198.51.100.8", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 234, "computer_id": 15, "hostname": "HOST-8606", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 14:14:24", "account_id": 52, "logon_type": "3", "source_ip": "203.0.113.152", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 235, "computer_id": 15, "hostname": "HOST-8606", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-11 14:41:52", "account_id": 68, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 236, "computer_id": 9, "hostname": "HOST-9211", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-10 18:30:02", "account_id": 85, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "msedge.exe", "service_name": null }, { "id": 237, "computer_id": 5, "hostname": "HOST-5541", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-11 19:37:30", "account_id": 36, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 238, "computer_id": 15, "hostname": "HOST-8606", "event_type_id": 2, "event_code": "4625", "channel": "Security", "category": "logon_failure", "logged_at": "2025-03-11 15:06:44", "account_id": 62, "logon_type": "3", "source_ip": "192.0.2.155", "failure_reason": "password_expired", "process_name": null, "service_name": null }, { "id": 239, "computer_id": 2, "hostname": "HOST-4236", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-11 15:09:42", "account_id": 58, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 240, "computer_id": 35, "hostname": "HOST-5770", "event_type_id": 5, "event_code": "4672", "channel": "Security", "category": "special_privileges", "logged_at": "2025-03-10 20:13:00", "account_id": 67, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 241, "computer_id": 35, "hostname": "HOST-5770", "event_type_id": 5, "event_code": "4672", "channel": "Security", "category": "special_privileges", "logged_at": "2025-03-10 20:18:54", "account_id": 100, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 242, "computer_id": 29, "hostname": "HOST-8568", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-11 09:43:20", "account_id": 101, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "cmd.exe", "service_name": null }, { "id": 243, "computer_id": 20, "hostname": "HOST-9003", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 01:17:17", "account_id": 103, "logon_type": "10", "source_ip": "203.0.113.177", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 244, "computer_id": 22, "hostname": "HOST-8193", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 21:05:30", "account_id": 66, "logon_type": "3", "source_ip": "203.0.113.221", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 245, "computer_id": 25, "hostname": "HOST-6664", "event_type_id": 4, "event_code": "4648", "channel": "Security", "category": "explicit_credentials", "logged_at": "2025-03-11 09:51:32", "account_id": 80, "logon_type": null, "source_ip": "198.51.100.218", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 246, "computer_id": 21, "hostname": "HOST-8543", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-11 07:28:31", "account_id": 57, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 247, "computer_id": 24, "hostname": "HOST-3903", "event_type_id": 8, "event_code": "7036", "channel": "System", "category": "service_state_changed", "logged_at": "2025-03-10 13:45:34", "account_id": null, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": "wuauserv" }, { "id": 248, "computer_id": 17, "hostname": "HOST-9373", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-11 15:03:23", "account_id": 28, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "msedge.exe", "service_name": null }, { "id": 249, "computer_id": 21, "hostname": "HOST-8543", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-11 07:38:31", "account_id": 27, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "msedge.exe", "service_name": null }, { "id": 250, "computer_id": 35, "hostname": "HOST-5770", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 20:51:52", "account_id": 85, "logon_type": "2", "source_ip": "192.0.2.75", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 251, "computer_id": 24, "hostname": "HOST-3903", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 14:22:55", "account_id": 23, "logon_type": "2", "source_ip": "203.0.113.14", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 252, "computer_id": 22, "hostname": "HOST-8193", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 21:23:34", "account_id": 105, "logon_type": "2", "source_ip": "203.0.113.71", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 253, "computer_id": 20, "hostname": "HOST-9003", "event_type_id": 10, "event_code": "6005", "channel": "System", "category": "event_log_started", "logged_at": "2025-03-11 01:36:31", "account_id": null, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 254, "computer_id": 16, "hostname": "HOST-6772", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 13:33:42", "account_id": 80, "logon_type": "3", "source_ip": "198.51.100.1", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 255, "computer_id": 30, "hostname": "HOST-2960", "event_type_id": 2, "event_code": "4625", "channel": "Security", "category": "logon_failure", "logged_at": "2025-03-10 17:13:14", "account_id": 34, "logon_type": "2", "source_ip": "198.51.100.245", "failure_reason": "bad_password", "process_name": null, "service_name": null }, { "id": 256, "computer_id": 24, "hostname": "HOST-3903", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-10 14:53:16", "account_id": 9, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 257, "computer_id": 30, "hostname": "HOST-2960", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-10 17:35:10", "account_id": 58, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "powershell.exe", "service_name": null }, { "id": 258, "computer_id": 10, "hostname": "HOST-9244", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-10 10:14:36", "account_id": 45, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 259, "computer_id": 22, "hostname": "HOST-8193", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-11 22:02:38", "account_id": 49, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "cmd.exe", "service_name": null }, { "id": 260, "computer_id": 7, "hostname": "HOST-5690", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 18:37:27", "account_id": 69, "logon_type": "3", "source_ip": "203.0.113.148", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 261, "computer_id": 8, "hostname": "HOST-5603", "event_type_id": 5, "event_code": "4672", "channel": "Security", "category": "special_privileges", "logged_at": "2025-03-10 14:20:27", "account_id": 45, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 262, "computer_id": 9, "hostname": "HOST-9211", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 18:53:08", "account_id": 21, "logon_type": "3", "source_ip": "203.0.113.2", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 263, "computer_id": 28, "hostname": "HOST-2180", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-11 22:07:49", "account_id": 89, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "powershell.exe", "service_name": null }, { "id": 264, "computer_id": 29, "hostname": "HOST-8568", "event_type_id": 2, "event_code": "4625", "channel": "Security", "category": "logon_failure", "logged_at": "2025-03-11 10:08:54", "account_id": 47, "logon_type": "2", "source_ip": "198.51.100.208", "failure_reason": "password_expired", "process_name": null, "service_name": null }, { "id": 265, "computer_id": 7, "hostname": "HOST-5690", "event_type_id": 2, "event_code": "4625", "channel": "Security", "category": "logon_failure", "logged_at": "2025-03-11 18:39:05", "account_id": 82, "logon_type": "10", "source_ip": "203.0.113.197", "failure_reason": "bad_password", "process_name": null, "service_name": null }, { "id": 266, "computer_id": 21, "hostname": "HOST-8543", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 07:56:32", "account_id": 28, "logon_type": "2", "source_ip": "203.0.113.166", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 267, "computer_id": 29, "hostname": "HOST-8568", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-11 10:20:45", "account_id": 82, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "cmd.exe", "service_name": null }, { "id": 268, "computer_id": 29, "hostname": "HOST-8568", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 10:27:03", "account_id": 7, "logon_type": "3", "source_ip": "198.51.100.87", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 269, "computer_id": 28, "hostname": "HOST-2180", "event_type_id": 10, "event_code": "6005", "channel": "System", "category": "event_log_started", "logged_at": "2025-03-11 22:17:15", "account_id": null, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 270, "computer_id": 15, "hostname": "HOST-8606", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 15:31:27", "account_id": 67, "logon_type": "2", "source_ip": "198.51.100.193", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 271, "computer_id": 27, "hostname": "HOST-4857", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-11 12:00:52", "account_id": 20, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "cmd.exe", "service_name": null }, { "id": 272, "computer_id": 32, "hostname": "HOST-8387", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-11 17:16:52", "account_id": 6, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "powershell.exe", "service_name": null }, { "id": 273, "computer_id": 5, "hostname": "HOST-5541", "event_type_id": 5, "event_code": "4672", "channel": "Security", "category": "special_privileges", "logged_at": "2025-03-11 19:59:34", "account_id": 56, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 274, "computer_id": 30, "hostname": "HOST-2960", "event_type_id": 5, "event_code": "4672", "channel": "Security", "category": "special_privileges", "logged_at": "2025-03-10 18:04:13", "account_id": 14, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 275, "computer_id": 22, "hostname": "HOST-8193", "event_type_id": 4, "event_code": "4648", "channel": "Security", "category": "explicit_credentials", "logged_at": "2025-03-11 22:21:03", "account_id": 5, "logon_type": null, "source_ip": "203.0.113.219", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 276, "computer_id": 9, "hostname": "HOST-9211", "event_type_id": 2, "event_code": "4625", "channel": "Security", "category": "logon_failure", "logged_at": "2025-03-10 18:55:38", "account_id": 41, "logon_type": "2", "source_ip": "203.0.113.76", "failure_reason": "bad_password", "process_name": null, "service_name": null }, { "id": 277, "computer_id": 29, "hostname": "HOST-8568", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 10:38:30", "account_id": 71, "logon_type": "10", "source_ip": "203.0.113.101", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 278, "computer_id": 11, "hostname": "HOST-2873", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-10 20:22:09", "account_id": 64, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "wmic.exe", "service_name": null }, { "id": 279, "computer_id": 12, "hostname": "HOST-1854", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 08:20:12", "account_id": 60, "logon_type": "3", "source_ip": "198.51.100.30", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 280, "computer_id": 22, "hostname": "HOST-8193", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-11 22:27:50", "account_id": 17, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 281, "computer_id": 5, "hostname": "HOST-5541", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-11 20:32:25", "account_id": 67, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 282, "computer_id": 26, "hostname": "HOST-7087", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-10 20:56:07", "account_id": 30, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 283, "computer_id": 9, "hostname": "HOST-9211", "event_type_id": 5, "event_code": "4672", "channel": "Security", "category": "special_privileges", "logged_at": "2025-03-10 19:01:10", "account_id": 15, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 284, "computer_id": 31, "hostname": "HOST-8967", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-10 17:33:32", "account_id": 19, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 285, "computer_id": 29, "hostname": "HOST-8568", "event_type_id": 5, "event_code": "4672", "channel": "Security", "category": "special_privileges", "logged_at": "2025-03-11 10:49:10", "account_id": 104, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 286, "computer_id": 26, "hostname": "HOST-7087", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-10 21:34:42", "account_id": 73, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 287, "computer_id": 15, "hostname": "HOST-8606", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 16:01:47", "account_id": 18, "logon_type": "3", "source_ip": "203.0.113.219", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 288, "computer_id": 36, "hostname": "HOST-2105", "event_type_id": 8, "event_code": "7036", "channel": "System", "category": "service_state_changed", "logged_at": "2025-03-10 17:48:51", "account_id": null, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": "RemoteRegistry" }, { "id": 289, "computer_id": 19, "hostname": "HOST-2115", "event_type_id": 8, "event_code": "7036", "channel": "System", "category": "service_state_changed", "logged_at": "2025-03-11 15:06:41", "account_id": null, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": "BITS" }, { "id": 290, "computer_id": 30, "hostname": "HOST-2960", "event_type_id": 8, "event_code": "7036", "channel": "System", "category": "service_state_changed", "logged_at": "2025-03-10 18:16:58", "account_id": null, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": "WinDefend" }, { "id": 291, "computer_id": 22, "hostname": "HOST-8193", "event_type_id": 5, "event_code": "4672", "channel": "Security", "category": "special_privileges", "logged_at": "2025-03-11 22:54:11", "account_id": 41, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 292, "computer_id": 16, "hostname": "HOST-6772", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 13:55:22", "account_id": 52, "logon_type": "3", "source_ip": "192.0.2.238", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 293, "computer_id": 30, "hostname": "HOST-2960", "event_type_id": 10, "event_code": "6005", "channel": "System", "category": "event_log_started", "logged_at": "2025-03-10 18:19:34", "account_id": null, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 294, "computer_id": 29, "hostname": "HOST-8568", "event_type_id": 2, "event_code": "4625", "channel": "Security", "category": "logon_failure", "logged_at": "2025-03-11 11:05:49", "account_id": 51, "logon_type": "3", "source_ip": "198.51.100.167", "failure_reason": "bad_password", "process_name": null, "service_name": null }, { "id": 295, "computer_id": 19, "hostname": "HOST-2115", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-11 15:11:56", "account_id": 3, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "powershell.exe", "service_name": null }, { "id": 296, "computer_id": 14, "hostname": "HOST-7073", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 16:26:00", "account_id": 74, "logon_type": "2", "source_ip": "198.51.100.111", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 297, "computer_id": 21, "hostname": "HOST-8543", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-11 08:25:16", "account_id": 27, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 298, "computer_id": 24, "hostname": "HOST-3903", "event_type_id": 8, "event_code": "7036", "channel": "System", "category": "service_state_changed", "logged_at": "2025-03-10 15:01:55", "account_id": null, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": "RemoteRegistry" }, { "id": 299, "computer_id": 8, "hostname": "HOST-5603", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-10 14:42:49", "account_id": 68, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "msedge.exe", "service_name": null }, { "id": 300, "computer_id": 18, "hostname": "HOST-0775", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-11 14:57:13", "account_id": 42, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 301, "computer_id": 12, "hostname": "HOST-1854", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-10 08:36:49", "account_id": 62, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 302, "computer_id": 20, "hostname": "HOST-9003", "event_type_id": 5, "event_code": "4672", "channel": "Security", "category": "special_privileges", "logged_at": "2025-03-11 01:43:11", "account_id": 102, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 303, "computer_id": 23, "hostname": "HOST-1933", "event_type_id": 8, "event_code": "7036", "channel": "System", "category": "service_state_changed", "logged_at": "2025-03-10 17:07:47", "account_id": null, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": "WinDefend" }, { "id": 304, "computer_id": 18, "hostname": "HOST-0775", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-11 15:04:58", "account_id": 51, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 305, "computer_id": 28, "hostname": "HOST-2180", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 22:53:15", "account_id": 79, "logon_type": "3", "source_ip": "192.0.2.184", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 306, "computer_id": 11, "hostname": "HOST-2873", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 20:51:41", "account_id": 77, "logon_type": "3", "source_ip": "198.51.100.160", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 307, "computer_id": 35, "hostname": "HOST-5770", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-10 21:07:09", "account_id": 93, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "rundll32.exe", "service_name": null }, { "id": 308, "computer_id": 4, "hostname": "HOST-1832", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-10 11:54:53", "account_id": 79, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 309, "computer_id": 35, "hostname": "HOST-5770", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 21:41:48", "account_id": 30, "logon_type": "5", "source_ip": "192.0.2.244", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 310, "computer_id": 32, "hostname": "HOST-8387", "event_type_id": 8, "event_code": "7036", "channel": "System", "category": "service_state_changed", "logged_at": "2025-03-11 17:24:06", "account_id": null, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": "wuauserv" }, { "id": 311, "computer_id": 26, "hostname": "HOST-7087", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 21:50:17", "account_id": 86, "logon_type": "3", "source_ip": "192.0.2.15", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 312, "computer_id": 32, "hostname": "HOST-8387", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-11 17:45:21", "account_id": 100, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 313, "computer_id": 22, "hostname": "HOST-8193", "event_type_id": 8, "event_code": "7036", "channel": "System", "category": "service_state_changed", "logged_at": "2025-03-11 23:31:25", "account_id": null, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": "Spooler" }, { "id": 314, "computer_id": 35, "hostname": "HOST-5770", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-10 22:21:42", "account_id": 86, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 315, "computer_id": 20, "hostname": "HOST-9003", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-11 02:01:20", "account_id": 78, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 316, "computer_id": 31, "hostname": "HOST-8967", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-10 17:38:06", "account_id": 34, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "cmd.exe", "service_name": null }, { "id": 317, "computer_id": 36, "hostname": "HOST-2105", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-10 18:04:12", "account_id": 99, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 318, "computer_id": 17, "hostname": "HOST-9373", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 15:30:51", "account_id": 54, "logon_type": "3", "source_ip": "203.0.113.202", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 319, "computer_id": 34, "hostname": "HOST-9673", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 14:48:11", "account_id": 94, "logon_type": "3", "source_ip": "192.0.2.11", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 320, "computer_id": 3, "hostname": "HOST-6177", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-10 18:20:04", "account_id": 32, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 321, "computer_id": 29, "hostname": "HOST-8568", "event_type_id": 2, "event_code": "4625", "channel": "Security", "category": "logon_failure", "logged_at": "2025-03-11 11:11:05", "account_id": 77, "logon_type": "3", "source_ip": "203.0.113.211", "failure_reason": "account_disabled", "process_name": null, "service_name": null }, { "id": 322, "computer_id": 21, "hostname": "HOST-8543", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-11 08:48:17", "account_id": 101, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "powershell.exe", "service_name": null }, { "id": 323, "computer_id": 7, "hostname": "HOST-5690", "event_type_id": 2, "event_code": "4625", "channel": "Security", "category": "logon_failure", "logged_at": "2025-03-11 18:53:59", "account_id": 27, "logon_type": "3", "source_ip": "192.0.2.236", "failure_reason": "bad_password", "process_name": null, "service_name": null }, { "id": 324, "computer_id": 35, "hostname": "HOST-5770", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-10 22:47:56", "account_id": 88, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "powershell.exe", "service_name": null }, { "id": 325, "computer_id": 30, "hostname": "HOST-2960", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-10 18:46:23", "account_id": 81, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 326, "computer_id": 28, "hostname": "HOST-2180", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 23:01:45", "account_id": 89, "logon_type": "2", "source_ip": "203.0.113.174", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 327, "computer_id": 29, "hostname": "HOST-8568", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-11 11:12:23", "account_id": 103, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 328, "computer_id": 28, "hostname": "HOST-2180", "event_type_id": 8, "event_code": "7036", "channel": "System", "category": "service_state_changed", "logged_at": "2025-03-11 23:38:56", "account_id": null, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": "RemoteRegistry" }, { "id": 329, "computer_id": 21, "hostname": "HOST-8543", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-11 09:01:13", "account_id": 78, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 330, "computer_id": 33, "hostname": "HOST-4501", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-10 21:15:15", "account_id": 104, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "svchost.exe", "service_name": null }, { "id": 331, "computer_id": 28, "hostname": "HOST-2180", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 23:59:45", "account_id": 31, "logon_type": "3", "source_ip": "198.51.100.241", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 332, "computer_id": 2, "hostname": "HOST-4236", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-11 15:17:54", "account_id": 32, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "cmd.exe", "service_name": null }, { "id": 333, "computer_id": 15, "hostname": "HOST-8606", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 16:41:50", "account_id": 62, "logon_type": "2", "source_ip": "203.0.113.69", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 334, "computer_id": 8, "hostname": "HOST-5603", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 14:58:43", "account_id": 35, "logon_type": "3", "source_ip": "198.51.100.31", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 335, "computer_id": 30, "hostname": "HOST-2960", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-10 19:00:46", "account_id": 15, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 336, "computer_id": 35, "hostname": "HOST-5770", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-10 22:52:07", "account_id": 56, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "svchost.exe", "service_name": null }, { "id": 337, "computer_id": 22, "hostname": "HOST-8193", "event_type_id": 8, "event_code": "7036", "channel": "System", "category": "service_state_changed", "logged_at": "2025-03-11 23:37:58", "account_id": null, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": "wuauserv" }, { "id": 338, "computer_id": 4, "hostname": "HOST-1832", "event_type_id": 2, "event_code": "4625", "channel": "Security", "category": "logon_failure", "logged_at": "2025-03-10 12:19:34", "account_id": 77, "logon_type": "2", "source_ip": "198.51.100.55", "failure_reason": "bad_password", "process_name": null, "service_name": null }, { "id": 339, "computer_id": 9, "hostname": "HOST-9211", "event_type_id": 2, "event_code": "4625", "channel": "Security", "category": "logon_failure", "logged_at": "2025-03-10 19:22:45", "account_id": 4, "logon_type": "3", "source_ip": "198.51.100.104", "failure_reason": "bad_password", "process_name": null, "service_name": null }, { "id": 340, "computer_id": 30, "hostname": "HOST-2960", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 19:12:46", "account_id": 17, "logon_type": "2", "source_ip": "192.0.2.8", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 341, "computer_id": 32, "hostname": "HOST-8387", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 17:48:58", "account_id": 65, "logon_type": "10", "source_ip": "192.0.2.101", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 342, "computer_id": 22, "hostname": "HOST-8193", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-12 00:02:59", "account_id": 12, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 343, "computer_id": 36, "hostname": "HOST-2105", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-10 18:23:13", "account_id": 53, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 344, "computer_id": 13, "hostname": "HOST-5961", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 11:42:48", "account_id": 93, "logon_type": "3", "source_ip": "198.51.100.173", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 345, "computer_id": 18, "hostname": "HOST-0775", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-11 15:14:50", "account_id": 88, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "svchost.exe", "service_name": null }, { "id": 346, "computer_id": 8, "hostname": "HOST-5603", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 15:33:54", "account_id": 67, "logon_type": "2", "source_ip": "198.51.100.180", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 347, "computer_id": 8, "hostname": "HOST-5603", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 15:36:50", "account_id": 54, "logon_type": "10", "source_ip": "203.0.113.207", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 348, "computer_id": 25, "hostname": "HOST-6664", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-11 09:57:22", "account_id": 85, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 349, "computer_id": 35, "hostname": "HOST-5770", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-10 22:56:18", "account_id": 59, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "msedge.exe", "service_name": null }, { "id": 350, "computer_id": 30, "hostname": "HOST-2960", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-10 19:52:09", "account_id": 3, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "svchost.exe", "service_name": null }, { "id": 351, "computer_id": 5, "hostname": "HOST-5541", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-11 20:59:12", "account_id": 69, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 352, "computer_id": 9, "hostname": "HOST-9211", "event_type_id": 5, "event_code": "4672", "channel": "Security", "category": "special_privileges", "logged_at": "2025-03-10 19:52:32", "account_id": 51, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 353, "computer_id": 20, "hostname": "HOST-9003", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 02:04:07", "account_id": 100, "logon_type": "3", "source_ip": "203.0.113.115", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 354, "computer_id": 16, "hostname": "HOST-6772", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-11 14:00:46", "account_id": 17, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "msedge.exe", "service_name": null }, { "id": 355, "computer_id": 2, "hostname": "HOST-4236", "event_type_id": 2, "event_code": "4625", "channel": "Security", "category": "logon_failure", "logged_at": "2025-03-11 15:37:11", "account_id": 75, "logon_type": "2", "source_ip": "198.51.100.169", "failure_reason": "password_expired", "process_name": null, "service_name": null }, { "id": 356, "computer_id": 26, "hostname": "HOST-7087", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-10 22:16:00", "account_id": 15, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 357, "computer_id": 21, "hostname": "HOST-8543", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-11 09:19:01", "account_id": 61, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 358, "computer_id": 30, "hostname": "HOST-2960", "event_type_id": 2, "event_code": "4625", "channel": "Security", "category": "logon_failure", "logged_at": "2025-03-10 20:18:11", "account_id": 2, "logon_type": "2", "source_ip": "203.0.113.168", "failure_reason": "bad_password", "process_name": null, "service_name": null }, { "id": 359, "computer_id": 36, "hostname": "HOST-2105", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-10 18:40:22", "account_id": 79, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 360, "computer_id": 7, "hostname": "HOST-5690", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-11 19:30:04", "account_id": 19, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "msedge.exe", "service_name": null }, { "id": 361, "computer_id": 7, "hostname": "HOST-5690", "event_type_id": 5, "event_code": "4672", "channel": "Security", "category": "special_privileges", "logged_at": "2025-03-11 19:43:39", "account_id": 48, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 362, "computer_id": 30, "hostname": "HOST-2960", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-10 20:27:49", "account_id": 101, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 363, "computer_id": 30, "hostname": "HOST-2960", "event_type_id": 4, "event_code": "4648", "channel": "Security", "category": "explicit_credentials", "logged_at": "2025-03-10 20:48:34", "account_id": 34, "logon_type": null, "source_ip": "192.0.2.66", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 364, "computer_id": 4, "hostname": "HOST-1832", "event_type_id": 5, "event_code": "4672", "channel": "Security", "category": "special_privileges", "logged_at": "2025-03-10 12:36:48", "account_id": 3, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 365, "computer_id": 1, "hostname": "HOST-0074", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 16:20:26", "account_id": 88, "logon_type": "3", "source_ip": "203.0.113.229", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 366, "computer_id": 8, "hostname": "HOST-5603", "event_type_id": 2, "event_code": "4625", "channel": "Security", "category": "logon_failure", "logged_at": "2025-03-10 16:07:12", "account_id": 50, "logon_type": "2", "source_ip": "198.51.100.234", "failure_reason": "password_expired", "process_name": null, "service_name": null }, { "id": 367, "computer_id": 34, "hostname": "HOST-9673", "event_type_id": 5, "event_code": "4672", "channel": "Security", "category": "special_privileges", "logged_at": "2025-03-11 15:11:33", "account_id": 24, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 368, "computer_id": 26, "hostname": "HOST-7087", "event_type_id": 2, "event_code": "4625", "channel": "Security", "category": "logon_failure", "logged_at": "2025-03-10 22:46:20", "account_id": 74, "logon_type": "3", "source_ip": "198.51.100.134", "failure_reason": "outside_logon_hours", "process_name": null, "service_name": null }, { "id": 369, "computer_id": 35, "hostname": "HOST-5770", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 23:19:14", "account_id": 82, "logon_type": "2", "source_ip": "203.0.113.249", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 370, "computer_id": 16, "hostname": "HOST-6772", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-11 14:20:09", "account_id": 51, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 371, "computer_id": 17, "hostname": "HOST-9373", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 15:41:15", "account_id": 1, "logon_type": "2", "source_ip": "192.0.2.70", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 372, "computer_id": 30, "hostname": "HOST-2960", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-10 20:51:39", "account_id": 17, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 373, "computer_id": 22, "hostname": "HOST-8193", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-12 00:22:53", "account_id": 12, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 374, "computer_id": 35, "hostname": "HOST-5770", "event_type_id": 2, "event_code": "4625", "channel": "Security", "category": "logon_failure", "logged_at": "2025-03-10 23:45:05", "account_id": 42, "logon_type": "2", "source_ip": "192.0.2.251", "failure_reason": "password_expired", "process_name": null, "service_name": null }, { "id": 375, "computer_id": 25, "hostname": "HOST-6664", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 10:14:06", "account_id": 62, "logon_type": "5", "source_ip": "203.0.113.34", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 376, "computer_id": 7, "hostname": "HOST-5690", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 20:18:53", "account_id": 98, "logon_type": "10", "source_ip": "203.0.113.246", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 377, "computer_id": 14, "hostname": "HOST-7073", "event_type_id": 2, "event_code": "4625", "channel": "Security", "category": "logon_failure", "logged_at": "2025-03-10 16:38:18", "account_id": 68, "logon_type": "3", "source_ip": "203.0.113.75", "failure_reason": "bad_password", "process_name": null, "service_name": null }, { "id": 378, "computer_id": 12, "hostname": "HOST-1854", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 08:40:56", "account_id": 64, "logon_type": "2", "source_ip": "192.0.2.213", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 379, "computer_id": 14, "hostname": "HOST-7073", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-10 16:57:57", "account_id": 104, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "msedge.exe", "service_name": null }, { "id": 380, "computer_id": 24, "hostname": "HOST-3903", "event_type_id": 5, "event_code": "4672", "channel": "Security", "category": "special_privileges", "logged_at": "2025-03-10 15:25:30", "account_id": 44, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 381, "computer_id": 18, "hostname": "HOST-0775", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 15:26:23", "account_id": 56, "logon_type": "3", "source_ip": "203.0.113.173", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 382, "computer_id": 5, "hostname": "HOST-5541", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 21:10:08", "account_id": 90, "logon_type": "10", "source_ip": "192.0.2.129", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 383, "computer_id": 30, "hostname": "HOST-2960", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-10 21:28:29", "account_id": 99, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 384, "computer_id": 36, "hostname": "HOST-2105", "event_type_id": 7, "event_code": "1102", "channel": "Security", "category": "audit_log_cleared", "logged_at": "2025-03-10 19:00:08", "account_id": 30, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 385, "computer_id": 36, "hostname": "HOST-2105", "event_type_id": 7, "event_code": "1102", "channel": "Security", "category": "audit_log_cleared", "logged_at": "2025-03-10 19:23:50", "account_id": 23, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 386, "computer_id": 10, "hostname": "HOST-9244", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-10 10:48:29", "account_id": 63, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 387, "computer_id": 21, "hostname": "HOST-8543", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 09:39:03", "account_id": 1, "logon_type": "3", "source_ip": "192.0.2.242", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 388, "computer_id": 7, "hostname": "HOST-5690", "event_type_id": 5, "event_code": "4672", "channel": "Security", "category": "special_privileges", "logged_at": "2025-03-11 20:45:40", "account_id": 39, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 389, "computer_id": 7, "hostname": "HOST-5690", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 21:07:13", "account_id": 19, "logon_type": "2", "source_ip": "203.0.113.12", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 390, "computer_id": 14, "hostname": "HOST-7073", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 17:09:07", "account_id": 75, "logon_type": "2", "source_ip": "192.0.2.1", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 391, "computer_id": 6, "hostname": "HOST-1215", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 11:23:45", "account_id": 45, "logon_type": "2", "source_ip": "203.0.113.183", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 392, "computer_id": 26, "hostname": "HOST-7087", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 22:51:30", "account_id": 2, "logon_type": "5", "source_ip": "198.51.100.250", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 393, "computer_id": 30, "hostname": "HOST-2960", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-10 22:05:42", "account_id": 62, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 394, "computer_id": 18, "hostname": "HOST-0775", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 15:59:40", "account_id": 96, "logon_type": "3", "source_ip": "192.0.2.69", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 395, "computer_id": 30, "hostname": "HOST-2960", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 22:39:52", "account_id": 29, "logon_type": "2", "source_ip": "198.51.100.212", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 396, "computer_id": 6, "hostname": "HOST-1215", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 11:39:50", "account_id": 73, "logon_type": "2", "source_ip": "198.51.100.46", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 397, "computer_id": 16, "hostname": "HOST-6772", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 15:00:08", "account_id": 14, "logon_type": "5", "source_ip": "203.0.113.40", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 398, "computer_id": 24, "hostname": "HOST-3903", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 15:32:49", "account_id": 83, "logon_type": "3", "source_ip": "192.0.2.196", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 399, "computer_id": 1, "hostname": "HOST-0074", "event_type_id": 8, "event_code": "7036", "channel": "System", "category": "service_state_changed", "logged_at": "2025-03-11 16:58:16", "account_id": null, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": "Spooler" }, { "id": 400, "computer_id": 19, "hostname": "HOST-2115", "event_type_id": 8, "event_code": "7036", "channel": "System", "category": "service_state_changed", "logged_at": "2025-03-11 15:32:49", "account_id": null, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": "WinDefend" }, { "id": 401, "computer_id": 22, "hostname": "HOST-8193", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-12 00:56:22", "account_id": 106, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 402, "computer_id": 22, "hostname": "HOST-8193", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-12 01:19:30", "account_id": 105, "logon_type": "2", "source_ip": "198.51.100.133", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 403, "computer_id": 4, "hostname": "HOST-1832", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 12:54:12", "account_id": 21, "logon_type": "3", "source_ip": "198.51.100.240", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 404, "computer_id": 8, "hostname": "HOST-5603", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 16:33:20", "account_id": 53, "logon_type": "3", "source_ip": "198.51.100.116", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 405, "computer_id": 21, "hostname": "HOST-8543", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 10:01:25", "account_id": 52, "logon_type": "10", "source_ip": "198.51.100.71", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 406, "computer_id": 1, "hostname": "HOST-0074", "event_type_id": 10, "event_code": "6005", "channel": "System", "category": "event_log_started", "logged_at": "2025-03-11 17:37:29", "account_id": null, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 407, "computer_id": 9, "hostname": "HOST-9211", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 20:31:55", "account_id": 64, "logon_type": "5", "source_ip": "198.51.100.11", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 408, "computer_id": 7, "hostname": "HOST-5690", "event_type_id": 5, "event_code": "4672", "channel": "Security", "category": "special_privileges", "logged_at": "2025-03-11 21:08:24", "account_id": 106, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 409, "computer_id": 21, "hostname": "HOST-8543", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-11 10:22:42", "account_id": 34, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 410, "computer_id": 36, "hostname": "HOST-2105", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-10 19:35:17", "account_id": 30, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "cmd.exe", "service_name": null }, { "id": 411, "computer_id": 36, "hostname": "HOST-2105", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 19:59:30", "account_id": 49, "logon_type": "3", "source_ip": "203.0.113.76", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 412, "computer_id": 18, "hostname": "HOST-0775", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-11 16:33:27", "account_id": 47, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "svchost.exe", "service_name": null }, { "id": 413, "computer_id": 35, "hostname": "HOST-5770", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-10 23:51:30", "account_id": 13, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "powershell.exe", "service_name": null }, { "id": 414, "computer_id": 8, "hostname": "HOST-5603", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-10 16:55:47", "account_id": 60, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 415, "computer_id": 15, "hostname": "HOST-8606", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-11 16:44:14", "account_id": 50, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 416, "computer_id": 16, "hostname": "HOST-6772", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-11 15:37:50", "account_id": 19, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "rundll32.exe", "service_name": null }, { "id": 417, "computer_id": 4, "hostname": "HOST-1832", "event_type_id": 8, "event_code": "7036", "channel": "System", "category": "service_state_changed", "logged_at": "2025-03-10 12:59:49", "account_id": null, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": "PSEXESVC" }, { "id": 418, "computer_id": 19, "hostname": "HOST-2115", "event_type_id": 5, "event_code": "4672", "channel": "Security", "category": "special_privileges", "logged_at": "2025-03-11 16:00:54", "account_id": 33, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 419, "computer_id": 22, "hostname": "HOST-8193", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-12 01:55:22", "account_id": 94, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "msedge.exe", "service_name": null }, { "id": 420, "computer_id": 20, "hostname": "HOST-9003", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-11 02:30:54", "account_id": 87, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 421, "computer_id": 23, "hostname": "HOST-1933", "event_type_id": 5, "event_code": "4672", "channel": "Security", "category": "special_privileges", "logged_at": "2025-03-10 17:29:21", "account_id": 39, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 422, "computer_id": 22, "hostname": "HOST-8193", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-12 02:24:11", "account_id": 12, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "svchost.exe", "service_name": null }, { "id": 423, "computer_id": 26, "hostname": "HOST-7087", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 23:13:30", "account_id": 50, "logon_type": "10", "source_ip": "192.0.2.11", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 424, "computer_id": 26, "hostname": "HOST-7087", "event_type_id": 2, "event_code": "4625", "channel": "Security", "category": "logon_failure", "logged_at": "2025-03-10 23:15:24", "account_id": 4, "logon_type": "10", "source_ip": "198.51.100.204", "failure_reason": "bad_password", "process_name": null, "service_name": null }, { "id": 425, "computer_id": 35, "hostname": "HOST-5770", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-11 00:24:49", "account_id": 46, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "msedge.exe", "service_name": null }, { "id": 426, "computer_id": 21, "hostname": "HOST-8543", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-11 10:42:37", "account_id": 58, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 427, "computer_id": 29, "hostname": "HOST-8568", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-11 11:28:10", "account_id": 2, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "msedge.exe", "service_name": null }, { "id": 428, "computer_id": 22, "hostname": "HOST-8193", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-12 02:52:07", "account_id": 25, "logon_type": "2", "source_ip": "198.51.100.122", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 429, "computer_id": 35, "hostname": "HOST-5770", "event_type_id": 2, "event_code": "4625", "channel": "Security", "category": "logon_failure", "logged_at": "2025-03-11 00:46:55", "account_id": 70, "logon_type": "3", "source_ip": "192.0.2.176", "failure_reason": "bad_password", "process_name": null, "service_name": null }, { "id": 430, "computer_id": 9, "hostname": "HOST-9211", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-10 21:00:39", "account_id": 60, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "wmic.exe", "service_name": null }, { "id": 431, "computer_id": 26, "hostname": "HOST-7087", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-10 23:52:51", "account_id": 14, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "powershell.exe", "service_name": null }, { "id": 432, "computer_id": 24, "hostname": "HOST-3903", "event_type_id": 8, "event_code": "7036", "channel": "System", "category": "service_state_changed", "logged_at": "2025-03-10 16:10:49", "account_id": null, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": "Spooler" }, { "id": 433, "computer_id": 2, "hostname": "HOST-4236", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-11 15:37:57", "account_id": 65, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 434, "computer_id": 24, "hostname": "HOST-3903", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-10 16:21:16", "account_id": 21, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "cmd.exe", "service_name": null }, { "id": 435, "computer_id": 26, "hostname": "HOST-7087", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 00:06:55", "account_id": 58, "logon_type": "3", "source_ip": "203.0.113.192", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 436, "computer_id": 35, "hostname": "HOST-5770", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 01:26:31", "account_id": 80, "logon_type": "2", "source_ip": "203.0.113.13", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 437, "computer_id": 28, "hostname": "HOST-2180", "event_type_id": 3, "event_code": "4634", "channel": "Security", "category": "logoff", "logged_at": "2025-03-12 00:16:30", "account_id": 67, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": null, "service_name": null }, { "id": 438, "computer_id": 10, "hostname": "HOST-9244", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 11:21:23", "account_id": 67, "logon_type": "3", "source_ip": "192.0.2.149", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 439, "computer_id": 23, "hostname": "HOST-1933", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-10 17:30:52", "account_id": 64, "logon_type": "3", "source_ip": "192.0.2.205", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 440, "computer_id": 2, "hostname": "HOST-4236", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 16:14:04", "account_id": 40, "logon_type": "2", "source_ip": "203.0.113.36", "failure_reason": null, "process_name": null, "service_name": null }, { "id": 441, "computer_id": 26, "hostname": "HOST-7087", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-11 00:18:26", "account_id": 47, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "msedge.exe", "service_name": null }, { "id": 442, "computer_id": 28, "hostname": "HOST-2180", "event_type_id": 6, "event_code": "4688", "channel": "Security", "category": "process_created", "logged_at": "2025-03-12 00:41:43", "account_id": 69, "logon_type": null, "source_ip": null, "failure_reason": null, "process_name": "svchost.exe", "service_name": null }, { "id": 443, "computer_id": 34, "hostname": "HOST-9673", "event_type_id": 1, "event_code": "4624", "channel": "Security", "category": "logon_success", "logged_at": "2025-03-11 15:16:14", "account_id": 38, "logon_type": "2", "source_ip": "192.0.2.123", "failure_reason": null, "process_name": null, "service_name": null } ] }