| Domain Controller | Action | Computer Affected | SamAccountName | DisplayName | UserPrincipalName | Home Directory | Home Path | Script Path | Profile Path | User Workstations | Password Last Set | Account Expires | Primary Group Id | Allowed To Delegate To | Old Uac Value | New Uac Value | User Account Control | User Parameters | Sid History | Who | When | Event ID | Record ID | Gathered From | Gathered LogName |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| AD1.ad.evotec.xyz | A computer account was changed. | EVOTEC\EVO1$ | 0x80 | 0x81 | %%2080 | EVOTEC\przemyslaw.klys | 28.04.2019 17:04:42 | 4742 | 8077030 | AD1 | Security | ||||||||||||||
| AD1.ad.evotec.xyz | A computer account was changed. | EVOTEC\EVOWIN$ | 26.04.2019 23:18:18 | NT AUTHORITY\ANONYMOUS LOGON | 26.04.2019 23:18:18 | 4742 | 8053626 | AD1 | Security | ||||||||||||||||
| AD2.ad.evotec.xyz | A computer account was changed. | EVOTEC\ADCONNECT$ | 27.04.2019 10:19:35 | NT AUTHORITY\ANONYMOUS LOGON | 27.04.2019 10:19:35 | 4742 | 4691104 | AD2 | Security | ||||||||||||||||
| AD1.ad.evotec.xyz | A computer account was changed. | EVOTEC\TEST6$ | 0x85 | 0x84 | %%2048 | EVOTEC\przemyslaw.klys | 28.04.2019 17:04:54 | 4742 | 8077040 | AD1 | Security | ||||||||||||||
| AD1.ad.evotec.xyz | A computer account was changed. | EVOTEC\TEST6$ | 28.04.2019 17:04:53 | NT AUTHORITY\ANONYMOUS LOGON | 28.04.2019 17:04:54 | 4742 | 8077037 | AD1 | Security | ||||||||||||||||
| AD1.ad.evotec.xyz | A computer account was created. | EVOTEC\TEST6$ | TEST6$ | %%1794 | %%1794 | 515 | 0x0 | 0x85 | %%2080 %%2082 %%2087 | EVOTEC\przemyslaw.klys | 28.04.2019 17:04:53 | 4741 | 8077035 | AD1 | Security | ||||||||||
| Domain Controller | Action | Computer Affected | SamAccountName | DisplayName | UserPrincipalName | Home Directory | Home Path | Script Path | Profile Path | User Workstations | Password Last Set | Account Expires | Primary Group Id | Allowed To Delegate To | Old Uac Value | New Uac Value | User Account Control | User Parameters | Sid History | Who | When | Event ID | Record ID | Gathered From | Gathered LogName |
| Domain Controller | Action | Computer Affected | Who | When | Event ID | Record ID | Gathered From | Gathered LogName |
|---|---|---|---|---|---|---|---|---|
| AD1.ad.evotec.xyz | A computer account was deleted. | EVOTEC\TEST5$ | EVOTEC\przemyslaw.klys | 28.04.2019 17:04:45 | 4743 | 8077032 | AD1 | Security |
| Domain Controller | Action | Computer Affected | Who | When | Event ID | Record ID | Gathered From | Gathered LogName |
| Domain Controller | Action | Action Detail | Who | When | Computer Object | Field Changed | Field Value | Record ID | Event ID | Gathered From | Gathered LogName |
|---|---|---|---|---|---|---|---|---|---|---|---|
| AD2.ad.evotec.xyz | A directory service object was modified. | Value Added | NT AUTHORITY\SYSTEM | 25.04.2019 05:00:21 | CN=AD2,OU=Domain Controllers,DC=ad,DC=evotec,DC=xyz | servicePrincipalName | TERMSRV/AD2.ad.evotec.xyz | 4668467 | 5136 | AD2 | Security |
| AD2.ad.evotec.xyz | A directory service object was modified. | Value Added | NT AUTHORITY\SYSTEM | 25.04.2019 05:00:21 | CN=AD2,OU=Domain Controllers,DC=ad,DC=evotec,DC=xyz | servicePrincipalName | TERMSRV/AD2 | 4668468 | 5136 | AD2 | Security |
| AD1.ad.evotec.xyz | A directory service object was modified. | Value Added | NT AUTHORITY\SYSTEM | 25.04.2019 18:04:51 | CN=AD1,OU=Domain Controllers,DC=ad,DC=evotec,DC=xyz | servicePrincipalName | TERMSRV/AD1.ad.evotec.xyz | 8039061 | 5136 | AD1 | Security |
| AD1.ad.evotec.xyz | A directory service object was modified. | Value Added | NT AUTHORITY\SYSTEM | 25.04.2019 18:04:51 | CN=AD1,OU=Domain Controllers,DC=ad,DC=evotec,DC=xyz | servicePrincipalName | TERMSRV/AD1 | 8039062 | 5136 | AD1 | Security |
| AD1.ad.evotec.xyz | A directory service object was modified. | Value Added | NT AUTHORITY\SYSTEM | 25.04.2019 18:27:57 | CN=AD1,OU=Domain Controllers,DC=ad,DC=evotec,DC=xyz | servicePrincipalName | TERMSRV/AD1.ad.evotec.xyz | 8039506 | 5136 | AD1 | Security |
| AD1.ad.evotec.xyz | A directory service object was modified. | Value Added | NT AUTHORITY\SYSTEM | 25.04.2019 18:27:57 | CN=AD1,OU=Domain Controllers,DC=ad,DC=evotec,DC=xyz | servicePrincipalName | TERMSRV/AD1 | 8039507 | 5136 | AD1 | Security |
| Domain Controller | Action | Action Detail | Who | When | Computer Object | Field Changed | Field Value | Record ID | Event ID | Gathered From | Gathered LogName |
| Domain Controller | Action | Group Name | Who | When | Event ID | Record ID | Gathered From | Gathered LogName |
|---|---|---|---|---|---|---|---|---|
| AD1.ad.evotec.xyz | A security-enabled local group was created. | GDS-TestGroup10 | EVOTEC\przemyslaw.klys | 28.04.2019 17:15:32 | 4731 | 8077238 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-disabled global group was created. | GDS-TestGroup11 | EVOTEC\przemyslaw.klys | 28.04.2019 17:15:41 | 4749 | 8077240 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled universal group was created. | GDS-TestGroup12 | EVOTEC\przemyslaw.klys | 28.04.2019 17:15:49 | 4754 | 8077242 | AD1 | Security |
| Domain Controller | Action | Group Name | Who | When | Event ID | Record ID | Gathered From | Gathered LogName |
| Domain Controller | Action | Group Name | Member Name | Who | When | Event ID | Record ID | Gathered From | Gathered LogName |
|---|---|---|---|---|---|---|---|---|---|
| AD1.ad.evotec.xyz | A member was removed from a security-enabled global group. | Domain Admins | Test Przemyslaw Klys | EVOTEC\Administrator | 28.04.2019 09:28:27 | 4729 | 8070337 | AD1 | Security |
| AD1.ad.evotec.xyz | A member was added to a security-enabled universal group. | Enterprise Admins | Test Przemyslaw Klys | EVOTEC\Administrator | 28.04.2019 09:28:31 | 4756 | 8070339 | AD1 | Security |
| AD1.ad.evotec.xyz | A member was removed from a security-enabled universal group. | Enterprise Admins | Test Przemyslaw Klys | EVOTEC\Administrator | 28.04.2019 09:28:35 | 4757 | 8070347 | AD1 | Security |
| AD1.ad.evotec.xyz | A member was removed from a security-disabled global group. | GDS-TestGroup2 | Service Task Scheduler | EVOTEC\przemyslaw.klys | 28.04.2019 15:43:33 | 4752 | 8075749 | AD1 | Security |
| AD1.ad.evotec.xyz | A member was removed from a security-disabled local group. | GDS-TestGroup5 | Service Task Scheduler | EVOTEC\przemyslaw.klys | 28.04.2019 15:43:33 | 4747 | 8075751 | AD1 | Security |
| AD1.ad.evotec.xyz | A member was added to a security-enabled global group. | GDS-TestGroup3 | Service Task Scheduler | EVOTEC\przemyslaw.klys | 28.04.2019 17:04:08 | 4728 | 8077013 | AD1 | Security |
| AD1.ad.evotec.xyz | A member was added to a security-enabled local group. | GDS-TestGroup4 | Service Task Scheduler | EVOTEC\przemyslaw.klys | 28.04.2019 17:04:08 | 4732 | 8077015 | AD1 | Security |
| AD1.ad.evotec.xyz | A member was added to a security-disabled local group. | GDS-TestGroup5 | Service Task Scheduler | EVOTEC\przemyslaw.klys | 28.04.2019 17:04:08 | 4746 | 8077017 | AD1 | Security |
| Domain Controller | Action | Group Name | Member Name | Who | When | Event ID | Record ID | Gathered From | Gathered LogName |
| Domain Controller | Action | Group Name | Who | When | Event ID | Record ID | Gathered From | Gathered LogName |
|---|---|---|---|---|---|---|---|---|
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD1$ | 25.04.2019 00:23:02 | 4799 | 8031184 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD1$ | 25.04.2019 00:23:02 | 4799 | 8031185 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD1$ | 25.04.2019 03:23:12 | 4799 | 8032749 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD1$ | 25.04.2019 03:23:12 | 4799 | 8032750 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD1$ | 25.04.2019 06:23:25 | 4799 | 8034315 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD1$ | 25.04.2019 06:23:25 | 4799 | 8034316 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD1$ | 25.04.2019 09:23:28 | 4799 | 8035835 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD1$ | 25.04.2019 09:23:28 | 4799 | 8035836 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD1$ | 25.04.2019 12:23:36 | 4799 | 8037351 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD1$ | 25.04.2019 12:23:36 | 4799 | 8037352 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD1$ | 25.04.2019 15:23:43 | 4799 | 8038862 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD1$ | 25.04.2019 15:23:43 | 4799 | 8038863 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD1$ | 25.04.2019 18:03:42 | 4799 | 8038959 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD1$ | 25.04.2019 18:03:42 | 4799 | 8038960 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD1$ | 25.04.2019 18:03:42 | 4799 | 8038961 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD1$ | 25.04.2019 18:03:42 | 4799 | 8038962 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD1$ | 25.04.2019 18:03:42 | 4799 | 8038963 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD1$ | 25.04.2019 18:03:42 | 4799 | 8038964 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD1$ | 25.04.2019 18:03:42 | 4799 | 8038965 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD1$ | 25.04.2019 18:03:42 | 4799 | 8038966 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD1$ | 25.04.2019 18:03:43 | 4799 | 8038967 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD1$ | 25.04.2019 18:03:43 | 4799 | 8038968 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD1$ | 25.04.2019 18:03:49 | 4799 | 8038969 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD1$ | 25.04.2019 18:03:49 | 4799 | 8038970 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD1$ | 25.04.2019 18:04:02 | 4799 | 8038980 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD1$ | 25.04.2019 18:04:02 | 4799 | 8038982 | AD1 | Security |
| AD2.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD2$ | 25.04.2019 18:04:05 | 4799 | 4673028 | AD2 | Security |
| AD2.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD2$ | 25.04.2019 18:04:06 | 4799 | 4673029 | AD2 | Security |
| AD2.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD2$ | 25.04.2019 18:04:07 | 4799 | 4673030 | AD2 | Security |
| AD2.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD2$ | 25.04.2019 18:04:07 | 4799 | 4673031 | AD2 | Security |
| AD2.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD2$ | 25.04.2019 18:04:07 | 4799 | 4673032 | AD2 | Security |
| AD2.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD2$ | 25.04.2019 18:04:07 | 4799 | 4673033 | AD2 | Security |
| AD2.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD2$ | 25.04.2019 18:04:07 | 4799 | 4673034 | AD2 | Security |
| AD2.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD2$ | 25.04.2019 18:04:07 | 4799 | 4673035 | AD2 | Security |
| AD2.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD2$ | 25.04.2019 18:04:07 | 4799 | 4673036 | AD2 | Security |
| AD2.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD2$ | 25.04.2019 18:04:07 | 4799 | 4673037 | AD2 | Security |
| AD2.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD2$ | 25.04.2019 18:04:21 | 4799 | 4673043 | AD2 | Security |
| AD2.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD2$ | 25.04.2019 18:04:22 | 4799 | 4673049 | AD2 | Security |
| AD2.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD2$ | 25.04.2019 18:04:22 | 4799 | 4673050 | AD2 | Security |
| AD2.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD2$ | 25.04.2019 18:04:22 | 4799 | 4673051 | AD2 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD1$ | 25.04.2019 18:04:54 | 4799 | 8039077 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD1$ | 25.04.2019 18:04:54 | 4799 | 8039078 | AD1 | Security |
| AD2.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD2$ | 25.04.2019 18:05:03 | 4799 | 4673078 | AD2 | Security |
| AD2.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD2$ | 25.04.2019 18:05:03 | 4799 | 4673079 | AD2 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD1$ | 25.04.2019 18:09:08 | 4799 | 8039214 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD1$ | 25.04.2019 18:09:08 | 4799 | 8039215 | AD1 | Security |
| AD2.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD2$ | 25.04.2019 18:10:40 | 4799 | 4673159 | AD2 | Security |
| AD2.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD2$ | 25.04.2019 18:10:40 | 4799 | 4673160 | AD2 | Security |
| AD2.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD2$ | 25.04.2019 18:15:37 | 4799 | 4673199 | AD2 | Security |
| AD2.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Users | EVOTEC\AD2$ | 25.04.2019 18:15:37 | 4799 | 4673200 | AD2 | Security |
| AD2.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Guests | EVOTEC\AD2$ | 25.04.2019 18:15:37 | 4799 | 4673201 | AD2 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD1$ | 25.04.2019 18:26:48 | 4799 | 8039425 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD1$ | 25.04.2019 18:26:48 | 4799 | 8039426 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD1$ | 25.04.2019 18:26:48 | 4799 | 8039427 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD1$ | 25.04.2019 18:26:48 | 4799 | 8039428 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD1$ | 25.04.2019 18:26:48 | 4799 | 8039429 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD1$ | 25.04.2019 18:26:48 | 4799 | 8039430 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD1$ | 25.04.2019 18:26:48 | 4799 | 8039431 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD1$ | 25.04.2019 18:26:48 | 4799 | 8039432 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD1$ | 25.04.2019 18:26:49 | 4799 | 8039433 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD1$ | 25.04.2019 18:26:49 | 4799 | 8039434 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD1$ | 25.04.2019 18:26:53 | 4799 | 8039435 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD1$ | 25.04.2019 18:26:53 | 4799 | 8039436 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD1$ | 25.04.2019 18:27:02 | 4799 | 8039442 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD1$ | 25.04.2019 18:27:02 | 4799 | 8039443 | AD1 | Security |
| AD2.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD2$ | 25.04.2019 18:27:05 | 4799 | 4673313 | AD2 | Security |
| AD2.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD2$ | 25.04.2019 18:27:05 | 4799 | 4673314 | AD2 | Security |
| AD2.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD2$ | 25.04.2019 18:27:06 | 4799 | 4673315 | AD2 | Security |
| AD2.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD2$ | 25.04.2019 18:27:06 | 4799 | 4673316 | AD2 | Security |
| AD2.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD2$ | 25.04.2019 18:27:07 | 4799 | 4673317 | AD2 | Security |
| AD2.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD2$ | 25.04.2019 18:27:07 | 4799 | 4673318 | AD2 | Security |
| AD2.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD2$ | 25.04.2019 18:27:07 | 4799 | 4673319 | AD2 | Security |
| AD2.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD2$ | 25.04.2019 18:27:07 | 4799 | 4673320 | AD2 | Security |
| AD2.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD2$ | 25.04.2019 18:27:07 | 4799 | 4673321 | AD2 | Security |
| AD2.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD2$ | 25.04.2019 18:27:07 | 4799 | 4673322 | AD2 | Security |
| AD2.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD2$ | 25.04.2019 18:27:22 | 4799 | 4673333 | AD2 | Security |
| AD2.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD2$ | 25.04.2019 18:27:22 | 4799 | 4673334 | AD2 | Security |
| AD2.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD2$ | 25.04.2019 18:27:23 | 4799 | 4673335 | AD2 | Security |
| AD2.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD2$ | 25.04.2019 18:27:23 | 4799 | 4673336 | AD2 | Security |
| AD2.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD2$ | 25.04.2019 18:27:56 | 4799 | 4673356 | AD2 | Security |
| AD2.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD2$ | 25.04.2019 18:27:56 | 4799 | 4673357 | AD2 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD1$ | 25.04.2019 18:28:01 | 4799 | 8039518 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD1$ | 25.04.2019 18:28:01 | 4799 | 8039519 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD1$ | 25.04.2019 18:32:16 | 4799 | 8039605 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD1$ | 25.04.2019 18:32:16 | 4799 | 8039606 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD1$ | 25.04.2019 21:28:13 | 4799 | 8041064 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD1$ | 25.04.2019 21:28:13 | 4799 | 8041065 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD1$ | 26.04.2019 00:28:21 | 4799 | 8042524 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD1$ | 26.04.2019 00:28:21 | 4799 | 8042525 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD1$ | 26.04.2019 03:28:29 | 4799 | 8043983 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD1$ | 26.04.2019 03:28:29 | 4799 | 8043984 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD1$ | 26.04.2019 06:28:37 | 4799 | 8045443 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD1$ | 26.04.2019 06:28:37 | 4799 | 8045444 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD1$ | 26.04.2019 09:28:45 | 4799 | 8046954 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD1$ | 26.04.2019 09:28:45 | 4799 | 8046955 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD1$ | 26.04.2019 12:28:52 | 4799 | 8048434 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD1$ | 26.04.2019 12:28:52 | 4799 | 8048435 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD1$ | 26.04.2019 15:28:53 | 4799 | 8049974 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD1$ | 26.04.2019 15:28:53 | 4799 | 8049975 | AD1 | Security |
| AD2.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD2$ | 26.04.2019 17:25:29 | 4799 | 4682923 | AD2 | Security |
| AD2.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD2$ | 26.04.2019 17:25:29 | 4799 | 4682924 | AD2 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD1$ | 26.04.2019 18:01:54 | 4799 | 8051281 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD1$ | 26.04.2019 18:01:54 | 4799 | 8051282 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD1$ | 26.04.2019 18:28:55 | 4799 | 8051559 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD1$ | 26.04.2019 18:28:55 | 4799 | 8051560 | AD1 | Security |
| AD2.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD2$ | 26.04.2019 18:37:52 | 4799 | 4683460 | AD2 | Security |
| AD2.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD2$ | 26.04.2019 18:37:52 | 4799 | 4683461 | AD2 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD1$ | 26.04.2019 21:29:03 | 4799 | 8052828 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD1$ | 26.04.2019 21:29:03 | 4799 | 8052829 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD1$ | 27.04.2019 00:29:11 | 4799 | 8054161 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD1$ | 27.04.2019 00:29:11 | 4799 | 8054162 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD1$ | 27.04.2019 03:29:19 | 4799 | 8055418 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD1$ | 27.04.2019 03:29:19 | 4799 | 8055419 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD1$ | 27.04.2019 06:27:48 | 4799 | 8056627 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD1$ | 27.04.2019 06:27:48 | 4799 | 8056628 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD1$ | 27.04.2019 09:27:57 | 4799 | 8057810 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD1$ | 27.04.2019 09:27:57 | 4799 | 8057811 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD1$ | 27.04.2019 12:28:05 | 4799 | 8059347 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD1$ | 27.04.2019 12:28:05 | 4799 | 8059348 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD1$ | 27.04.2019 15:28:13 | 4799 | 8060984 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD1$ | 27.04.2019 15:28:13 | 4799 | 8060985 | AD1 | Security |
| AD2.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD2$ | 27.04.2019 17:39:08 | 4799 | 4697217 | AD2 | Security |
| AD2.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD2$ | 27.04.2019 17:39:08 | 4799 | 4697218 | AD2 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD1$ | 27.04.2019 18:28:23 | 4799 | 8062695 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD1$ | 27.04.2019 18:28:23 | 4799 | 8062696 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD1$ | 27.04.2019 18:37:06 | 4799 | 8062817 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD1$ | 27.04.2019 18:37:06 | 4799 | 8062818 | AD1 | Security |
| AD2.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD2$ | 27.04.2019 18:37:54 | 4799 | 4698086 | AD2 | Security |
| AD2.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD2$ | 27.04.2019 18:37:54 | 4799 | 4698087 | AD2 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD1$ | 27.04.2019 19:08:47 | 4799 | 8063131 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD1$ | 27.04.2019 19:08:47 | 4799 | 8063132 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD1$ | 27.04.2019 21:28:30 | 4799 | 8064412 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD1$ | 27.04.2019 21:28:30 | 4799 | 8064413 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD1$ | 28.04.2019 00:28:38 | 4799 | 8065923 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD1$ | 28.04.2019 00:28:38 | 4799 | 8065924 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD1$ | 28.04.2019 03:28:46 | 4799 | 8067405 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD1$ | 28.04.2019 03:28:46 | 4799 | 8067406 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD1$ | 28.04.2019 06:28:54 | 4799 | 8068856 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD1$ | 28.04.2019 06:28:54 | 4799 | 8068857 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD1$ | 28.04.2019 09:27:32 | 4799 | 8070319 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD1$ | 28.04.2019 09:29:02 | 4799 | 8070369 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD1$ | 28.04.2019 09:29:02 | 4799 | 8070370 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD1$ | 28.04.2019 12:29:12 | 4799 | 8072776 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD1$ | 28.04.2019 12:29:12 | 4799 | 8072777 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD1$ | 28.04.2019 15:29:18 | 4799 | 8075506 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Backup Operators | EVOTEC\AD1$ | 28.04.2019 15:29:18 | 4799 | 8075507 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\AD1$ | 28.04.2019 15:42:34 | 4799 | 8075733 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Users | EVOTEC\przemyslaw.klys | 28.04.2019 15:42:46 | 4799 | 8075740 | AD1 | Security |
| AD1.ad.evotec.xyz | A security-enabled local group membership was enumerated. | Administrators | EVOTEC\przemyslaw.klys | 28.04.2019 15:42:46 | 4799 | 8075741 | AD1 | Security |
| Domain Controller | Action | Group Name | Who | When | Event ID | Record ID | Gathered From | Gathered LogName |
| Domain Controller | Action | Group Name | Who | When | Changed Group Type | Changed SamAccountName | Changed SidHistory | Event ID | Record ID | Gathered From | Gathered LogName |
|---|---|---|---|---|---|---|---|---|---|---|---|
| AD1.ad.evotec.xyz | A security-enabled global group was changed. | Domain Admins | EVOTEC\Administrator | 28.04.2019 09:28:27 | 4737 | 8070336 | AD1 | Security | |||
| AD1.ad.evotec.xyz | A security-disabled global group was changed. | GDS-TestGroup2 | EVOTEC\przemyslaw.klys | 28.04.2019 15:43:33 | 4750 | 8075748 | AD1 | Security | |||
| AD1.ad.evotec.xyz | A security-disabled local group was changed. | GDS-TestGroup5 | EVOTEC\przemyslaw.klys | 28.04.2019 15:43:33 | 4745 | 8075750 | AD1 | Security | |||
| AD1.ad.evotec.xyz | A security-enabled global group was changed. | GDS-TestGroup3 | EVOTEC\przemyslaw.klys | 28.04.2019 17:04:08 | 4737 | 8077012 | AD1 | Security | |||
| AD1.ad.evotec.xyz | A security-enabled local group was changed. | GDS-TestGroup4 | EVOTEC\przemyslaw.klys | 28.04.2019 17:04:08 | 4735 | 8077014 | AD1 | Security | |||
| AD1.ad.evotec.xyz | A security-disabled local group was changed. | GDS-TestGroup5 | EVOTEC\przemyslaw.klys | 28.04.2019 17:04:08 | 4745 | 8077016 | AD1 | Security | |||
| Domain Controller | Action | Group Name | Who | When | Changed Group Type | Changed SamAccountName | Changed SidHistory | Event ID | Record ID | Gathered From | Gathered LogName |
| Domain Controller | Action | Action Detail | Who | When | Computer Object | ObjectClass | Field Changed | Field Value | Record ID | Event ID | Gathered From | Gathered LogName |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| AD1.ad.evotec.xyz | A directory service object was modified. | Value Added | EVOTEC\Administrator | 28.04.2019 09:28:34 | CN=Enterprise Admins,CN=Users,DC=ad,DC=evotec,DC=xyz | group | member | CN=Test Przemyslaw Klys,OU=Users,OU=Production,DC=ad,DC=evotec,DC=xyz | 8070342 | 5136 | AD1 | Security |
| AD1.ad.evotec.xyz | A directory service object was modified. | Value Deleted | EVOTEC\Administrator | 28.04.2019 09:28:34 | CN=Domain Admins,CN=Users,DC=ad,DC=evotec,DC=xyz | group | member | CN=Test Przemyslaw Klys,OU=Users,OU=Production,DC=ad,DC=evotec,DC=xyz | 8070343 | 5136 | AD1 | Security |
| AD1.ad.evotec.xyz | A directory service object was modified. | Value Deleted | EVOTEC\Administrator | 28.04.2019 09:28:44 | CN=Enterprise Admins,CN=Users,DC=ad,DC=evotec,DC=xyz | group | member | CN=Test Przemyslaw Klys,OU=Users,OU=Production,DC=ad,DC=evotec,DC=xyz | 8070350 | 5136 | AD1 | Security |
| AD1.ad.evotec.xyz | A directory service object was modified. | Value Deleted | EVOTEC\przemyslaw.klys | 28.04.2019 15:43:35 | CN=GDS-TestGroup2,OU=SecurityGroups,OU=Groups,OU=Production,DC=ad,DC=evotec,DC=xyz | group | member | CN=Service Task Scheduler,OU=Users-Offboarded,OU=Production,DC=ad,DC=evotec,DC=xyz | 8075753 | 5136 | AD1 | Security |
| AD1.ad.evotec.xyz | A directory service object was modified. | Value Added | EVOTEC\przemyslaw.klys | 28.04.2019 17:04:16 | CN=GDS-TestGroup3,OU=SecurityGroups,OU=Groups,OU=Production,DC=ad,DC=evotec,DC=xyz | group | member | CN=Service Task Scheduler,OU=Users-Offboarded,OU=Production,DC=ad,DC=evotec,DC=xyz | 8077020 | 5136 | AD1 | Security |
| Domain Controller | Action | Action Detail | Who | When | Computer Object | ObjectClass | Field Changed | Field Value | Record ID | Event ID | Gathered From | Gathered LogName |
| Domain Controller | Action | User Affected | SamAccountName | DisplayName | UserPrincipalName | Home Directory | Home Path | Script Path | Profile Path | User Workstations | Password Last Set | Account Expires | Primary Group Id | Allowed To Delegate To | Old Uac Value | New Uac Value | User Account Control | User Parameters | Sid History | Who | When | Event ID | Record ID | Gathered From | Gathered LogName |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| AD1.ad.evotec.xyz | A user account was changed. | EVOTEC\test.przemyslaw.klys | Test Przemyslaw Kly | EVOTEC\Administrator | 28.04.2019 09:28:18 | 4738 | 8070330 | AD1 | Security | ||||||||||||||||
| AD1.ad.evotec.xyz | A user account was changed. | EVOTEC\test.przemyslaw.klys | Test Przemyslaw Klys | EVOTEC\Administrator | 28.04.2019 09:28:21 | 4738 | 8070331 | AD1 | Security | ||||||||||||||||
| AD1.ad.evotec.xyz | A user account was changed. | EVOTEC\test.przemyslaw.klys | EVOTEC\Administrator | 28.04.2019 09:28:48 | 4738 | 8070351 | AD1 | Security | |||||||||||||||||
| AD1.ad.evotec.xyz | A user account was changed. | EVOTEC\new | LOCKOUT | LOCKOUT | INTERDOMAIN_TRUST_ACCOUNT | EVOTEC\przemyslaw.klys | 28.04.2019 17:03:24 | 4738 | 8076962 | AD1 | Security | ||||||||||||||
| AD1.ad.evotec.xyz | A user account was changed. | EVOTEC\new | LOCKOUT | LOCKOUT | PASSWD_NOTREQD, INTERDOMAIN_TRUST_ACCOUNT | EVOTEC\przemyslaw.klys | 28.04.2019 17:03:27 | 4738 | 8076964 | AD1 | Security | ||||||||||||||
| AD1.ad.evotec.xyz | A user account was changed. | EVOTEC\svcTaskScheduler | 28.04.2019 17:03:45 | NT AUTHORITY\ANONYMOUS LOGON | 28.04.2019 17:03:45 | 4738 | 8076969 | AD1 | Security | ||||||||||||||||
| AD1.ad.evotec.xyz | A user account was changed. | EVOTEC\svcTaskScheduler | EVOTEC\przemyslaw.klys | 28.04.2019 17:03:53 | 4738 | 8076973 | AD1 | Security | |||||||||||||||||
| AD1.ad.evotec.xyz | A user account was changed. | EVOTEC\svcTaskSchedule | svcTaskSchedule | EVOTEC\przemyslaw.klys | 28.04.2019 17:03:58 | 4738 | 8076977 | AD1 | Security | ||||||||||||||||
| AD1.ad.evotec.xyz | A user account was changed. | EVOTEC\svcTaskScheduler | svcTaskScheduler | EVOTEC\przemyslaw.klys | 28.04.2019 17:04:00 | 4738 | 8076979 | AD1 | Security | ||||||||||||||||
| AD1.ad.evotec.xyz | A user account was created. | EVOTEC\testuserdel | testuserdel | Test User | testuserdel@ad.evotec.xyz | %%1794 | %%1794 | 513 | RESERVED, LOCKOUT | PASSWD_NOTREQD, INTERDOMAIN_TRUST_ACCOUNT, ACCOUNTDISABLE, PASSWD_NOTREQD, INTERDOMAIN_TRUST_ACCOUNT, RESERVED, PASSWD_NOTREQD, INTERDOMAIN_TRUST_ACCOUNT | EVOTEC\przemyslaw.klys | 28.04.2019 17:15:13 | 4720 | 8077222 | AD1 | Security | |||||||||
| AD1.ad.evotec.xyz | A user account was changed. | EVOTEC\testuserdel | 28.04.2019 17:15:13 | NT AUTHORITY\ANONYMOUS LOGON | 28.04.2019 17:15:13 | 4738 | 8077224 | AD1 | Security | ||||||||||||||||
| AD1.ad.evotec.xyz | A user account was changed. | EVOTEC\testuserdel | %%1794 | EVOTEC\przemyslaw.klys | 28.04.2019 17:15:13 | 4738 | 8077227 | AD1 | Security | ||||||||||||||||
| AD1.ad.evotec.xyz | A user account was changed. | EVOTEC\testuserdel | RESERVED, LOCKOUT | LOCKOUT | ACCOUNTDISABLE, INTERDOMAIN_TRUST_ACCOUNT | EVOTEC\przemyslaw.klys | 28.04.2019 17:15:13 | 4738 | 8077228 | AD1 | Security | ||||||||||||||
| AD1.ad.evotec.xyz | A user account was changed. | EVOTEC\testuserdel | LOCKOUT | LOCKOUT | INTERDOMAIN_TRUST_ACCOUNT | EVOTEC\przemyslaw.klys | 28.04.2019 17:15:13 | 4738 | 8077229 | AD1 | Security | ||||||||||||||
| Domain Controller | Action | User Affected | SamAccountName | DisplayName | UserPrincipalName | Home Directory | Home Path | Script Path | Profile Path | User Workstations | Password Last Set | Account Expires | Primary Group Id | Allowed To Delegate To | Old Uac Value | New Uac Value | User Account Control | User Parameters | Sid History | Who | When | Event ID | Record ID | Gathered From | Gathered LogName |
| Domain Controller | Action | Action Detail | Who | When | User Object | Field Changed | Field Value | Record ID | Event ID | Gathered From | Gathered LogName |
|---|---|---|---|---|---|---|---|---|---|---|---|
| AD1.ad.evotec.xyz | A directory service object was modified. | Value Deleted | EVOTEC\Administrator | 28.04.2019 09:28:24 | CN=Test Przemyslaw Klys,OU=Users,OU=Production,DC=ad,DC=evotec,DC=xyz | displayName | Test Przemyslaw Klys | 8070332 | 5136 | AD1 | Security |
| AD1.ad.evotec.xyz | A directory service object was modified. | Value Added | EVOTEC\Administrator | 28.04.2019 09:28:24 | CN=Test Przemyslaw Klys,OU=Users,OU=Production,DC=ad,DC=evotec,DC=xyz | displayName | Test Przemyslaw Kly | 8070333 | 5136 | AD1 | Security |
| AD1.ad.evotec.xyz | A directory service object was modified. | Value Deleted | EVOTEC\Administrator | 28.04.2019 09:28:24 | CN=Test Przemyslaw Klys,OU=Users,OU=Production,DC=ad,DC=evotec,DC=xyz | displayName | Test Przemyslaw Kly | 8070334 | 5136 | AD1 | Security |
| AD1.ad.evotec.xyz | A directory service object was modified. | Value Added | EVOTEC\Administrator | 28.04.2019 09:28:24 | CN=Test Przemyslaw Klys,OU=Users,OU=Production,DC=ad,DC=evotec,DC=xyz | displayName | Test Przemyslaw Klys | 8070335 | 5136 | AD1 | Security |
| AD1.ad.evotec.xyz | A directory service object was modified. | Value Deleted | EVOTEC\Administrator | 28.04.2019 09:28:34 | CN=Test Przemyslaw Klys,OU=Users,OU=Production,DC=ad,DC=evotec,DC=xyz | primaryGroupID | 513 | 8070340 | 5136 | AD1 | Security |
| AD1.ad.evotec.xyz | A directory service object was modified. | Value Added | EVOTEC\Administrator | 28.04.2019 09:28:34 | CN=Test Przemyslaw Klys,OU=Users,OU=Production,DC=ad,DC=evotec,DC=xyz | primaryGroupID | 513 | 8070341 | 5136 | AD1 | Security |
| AD1.ad.evotec.xyz | A directory service object was modified. | Value Deleted | EVOTEC\Administrator | 28.04.2019 09:28:34 | CN=Test Przemyslaw Klys,OU=Users,OU=Production,DC=ad,DC=evotec,DC=xyz | primaryGroupID | 513 | 8070344 | 5136 | AD1 | Security |
| AD1.ad.evotec.xyz | A directory service object was modified. | Value Added | EVOTEC\Administrator | 28.04.2019 09:28:34 | CN=Test Przemyslaw Klys,OU=Users,OU=Production,DC=ad,DC=evotec,DC=xyz | primaryGroupID | 513 | 8070345 | 5136 | AD1 | Security |
| AD1.ad.evotec.xyz | A directory service object was modified. | Value Deleted | EVOTEC\Administrator | 28.04.2019 09:28:44 | CN=Test Przemyslaw Klys,OU=Users,OU=Production,DC=ad,DC=evotec,DC=xyz | primaryGroupID | 513 | 8070348 | 5136 | AD1 | Security |
| AD1.ad.evotec.xyz | A directory service object was modified. | Value Added | EVOTEC\Administrator | 28.04.2019 09:28:44 | CN=Test Przemyslaw Klys,OU=Users,OU=Production,DC=ad,DC=evotec,DC=xyz | primaryGroupID | 513 | 8070349 | 5136 | AD1 | Security |
| AD1.ad.evotec.xyz | A directory service object was modified. | Value Added | EVOTEC\Administrator | 28.04.2019 09:28:54 | CN=Test Przemyslaw Klys,OU=Users,OU=Production,DC=ad,DC=evotec,DC=xyz | c | PL | 8070357 | 5136 | AD1 | Security |
| AD1.ad.evotec.xyz | A directory service object was modified. | Value Deleted | EVOTEC\Administrator | 28.04.2019 09:28:54 | CN=Test Przemyslaw Klys,OU=Users,OU=Production,DC=ad,DC=evotec,DC=xyz | countryCode | 0 | 8070358 | 5136 | AD1 | Security |
| AD1.ad.evotec.xyz | A directory service object was modified. | Value Added | EVOTEC\Administrator | 28.04.2019 09:28:54 | CN=Test Przemyslaw Klys,OU=Users,OU=Production,DC=ad,DC=evotec,DC=xyz | countryCode | 616 | 8070359 | 5136 | AD1 | Security |
| AD1.ad.evotec.xyz | A directory service object was modified. | Value Added | EVOTEC\Administrator | 28.04.2019 09:28:54 | CN=Test Przemyslaw Klys,OU=Users,OU=Production,DC=ad,DC=evotec,DC=xyz | co | Poland | 8070360 | 5136 | AD1 | Security |
| AD1.ad.evotec.xyz | A directory service object was modified. | Value Added | EVOTEC\Administrator | 28.04.2019 09:28:54 | CN=Test Przemyslaw Klys,OU=Users,OU=Production,DC=ad,DC=evotec,DC=xyz | postalCode | 40-508 | 8070361 | 5136 | AD1 | Security |
| AD1.ad.evotec.xyz | A directory service object was modified. | Value Deleted | EVOTEC\przemyslaw.klys | 28.04.2019 15:43:25 | CN=Service Task Scheduler,OU=Users-Offboarded,OU=Production,DC=ad,DC=evotec,DC=xyz | givenName | Service Task | 8075746 | 5136 | AD1 | Security |
| AD1.ad.evotec.xyz | A directory service object was modified. | Value Added | EVOTEC\przemyslaw.klys | 28.04.2019 15:43:25 | CN=Service Task Scheduler,OU=Users-Offboarded,OU=Production,DC=ad,DC=evotec,DC=xyz | givenName | Service Tas | 8075747 | 5136 | AD1 | Security |
| AD1.ad.evotec.xyz | A directory service object was modified. | Value Deleted | EVOTEC\przemyslaw.klys | 28.04.2019 15:43:35 | CN=Service Task Scheduler,OU=Users-Offboarded,OU=Production,DC=ad,DC=evotec,DC=xyz | givenName | Service Tas | 8075754 | 5136 | AD1 | Security |
| AD1.ad.evotec.xyz | A directory service object was modified. | Value Added | EVOTEC\przemyslaw.klys | 28.04.2019 15:43:35 | CN=Service Task Scheduler,OU=Users-Offboarded,OU=Production,DC=ad,DC=evotec,DC=xyz | givenName | Service Task | 8075755 | 5136 | AD1 | Security |
| AD1.ad.evotec.xyz | A directory service object was modified. | Value Deleted | EVOTEC\przemyslaw.klys | 28.04.2019 15:43:35 | CN=Service Task Scheduler,OU=Users-Offboarded,OU=Production,DC=ad,DC=evotec,DC=xyz | primaryGroupID | 513 | 8075756 | 5136 | AD1 | Security |
| AD1.ad.evotec.xyz | A directory service object was modified. | Value Added | EVOTEC\przemyslaw.klys | 28.04.2019 15:43:35 | CN=Service Task Scheduler,OU=Users-Offboarded,OU=Production,DC=ad,DC=evotec,DC=xyz | primaryGroupID | 513 | 8075757 | 5136 | AD1 | Security |
| AD1.ad.evotec.xyz | A directory service object was modified. | Value Deleted | EVOTEC\przemyslaw.klys | 28.04.2019 17:03:56 | CN=Service Task Scheduler,OU=Users-Offboarded,OU=Production,DC=ad,DC=evotec,DC=xyz | description | dfsdfsdfsdf | 8076975 | 5136 | AD1 | Security |
| AD1.ad.evotec.xyz | A directory service object was modified. | Value Deleted | EVOTEC\przemyslaw.klys | 28.04.2019 17:03:56 | CN=Service Task Scheduler,OU=Users-Offboarded,OU=Production,DC=ad,DC=evotec,DC=xyz | physicalDeliveryOfficeName | sdfdsf | 8076976 | 5136 | AD1 | Security |
| AD1.ad.evotec.xyz | A directory service object was modified. | Value Deleted | EVOTEC\przemyslaw.klys | 28.04.2019 17:04:06 | CN=Service Task Scheduler,OU=Users-Offboarded,OU=Production,DC=ad,DC=evotec,DC=xyz | sAMAccountName | svcTaskScheduler | 8077008 | 5136 | AD1 | Security |
| AD1.ad.evotec.xyz | A directory service object was modified. | Value Added | EVOTEC\przemyslaw.klys | 28.04.2019 17:04:06 | CN=Service Task Scheduler,OU=Users-Offboarded,OU=Production,DC=ad,DC=evotec,DC=xyz | sAMAccountName | svcTaskSchedule | 8077009 | 5136 | AD1 | Security |
| AD1.ad.evotec.xyz | A directory service object was modified. | Value Deleted | EVOTEC\przemyslaw.klys | 28.04.2019 17:04:06 | CN=Service Task Scheduler,OU=Users-Offboarded,OU=Production,DC=ad,DC=evotec,DC=xyz | sAMAccountName | svcTaskSchedule | 8077010 | 5136 | AD1 | Security |
| AD1.ad.evotec.xyz | A directory service object was modified. | Value Added | EVOTEC\przemyslaw.klys | 28.04.2019 17:04:06 | CN=Service Task Scheduler,OU=Users-Offboarded,OU=Production,DC=ad,DC=evotec,DC=xyz | sAMAccountName | svcTaskScheduler | 8077011 | 5136 | AD1 | Security |
| AD1.ad.evotec.xyz | A directory service object was modified. | Value Deleted | EVOTEC\przemyslaw.klys | 28.04.2019 17:04:16 | CN=Service Task Scheduler,OU=Users-Offboarded,OU=Production,DC=ad,DC=evotec,DC=xyz | primaryGroupID | 513 | 8077021 | 5136 | AD1 | Security |
| AD1.ad.evotec.xyz | A directory service object was modified. | Value Added | EVOTEC\przemyslaw.klys | 28.04.2019 17:04:16 | CN=Service Task Scheduler,OU=Users-Offboarded,OU=Production,DC=ad,DC=evotec,DC=xyz | primaryGroupID | 513 | 8077022 | 5136 | AD1 | Security |
| AD1.ad.evotec.xyz | A directory service object was modified. | Value Added | EVOTEC\przemyslaw.klys | 28.04.2019 17:04:26 | CN=Service Task Scheduler,OU=Users-Offboarded,OU=Production,DC=ad,DC=evotec,DC=xyz | manager | CN=Przemysław Kłys,OU=Users,OU=Production,DC=ad,DC=evotec,DC=xyz | 8077027 | 5136 | AD1 | Security |
| Domain Controller | Action | Action Detail | Who | When | User Object | Field Changed | Field Value | Record ID | Event ID | Gathered From | Gathered LogName |
| * |
|---|
| No data available. |
| * |
| Domain Controller | Action | Who | When | User Affected | Event ID | Record ID | Gathered From | Gathered LogName |
|---|---|---|---|---|---|---|---|---|
| AD1.ad.evotec.xyz | A user account was enabled. | EVOTEC\przemyslaw.klys | 28.04.2019 17:03:24 | EVOTEC\new | 4722 | 8076963 | AD1 | Security |
| AD1.ad.evotec.xyz | A user account was disabled. | EVOTEC\przemyslaw.klys | 28.04.2019 17:03:27 | EVOTEC\new | 4725 | 8076965 | AD1 | Security |
| AD1.ad.evotec.xyz | An attempt was made to reset an account's password. | EVOTEC\przemyslaw.klys | 28.04.2019 17:03:45 | EVOTEC\svcTaskScheduler | 4724 | 8076970 | AD1 | Security |
| AD1.ad.evotec.xyz | A user account was disabled. | EVOTEC\przemyslaw.klys | 28.04.2019 17:04:42 | EVOTEC\EVO1$ | 4725 | 8077031 | AD1 | Security |
| AD1.ad.evotec.xyz | An attempt was made to reset an account's password. | EVOTEC\przemyslaw.klys | 28.04.2019 17:04:54 | EVOTEC\TEST6$ | 4724 | 8077038 | AD1 | Security |
| AD1.ad.evotec.xyz | A user account was enabled. | EVOTEC\przemyslaw.klys | 28.04.2019 17:04:54 | EVOTEC\TEST6$ | 4722 | 8077041 | AD1 | Security |
| AD1.ad.evotec.xyz | An attempt was made to reset an account's password. | EVOTEC\przemyslaw.klys | 28.04.2019 17:15:13 | EVOTEC\testuserdel | 4724 | 8077225 | AD1 | Security |
| AD1.ad.evotec.xyz | A user account was enabled. | EVOTEC\przemyslaw.klys | 28.04.2019 17:15:13 | EVOTEC\testuserdel | 4722 | 8077230 | AD1 | Security |
| AD1.ad.evotec.xyz | A user account was deleted. | EVOTEC\przemyslaw.klys | 28.04.2019 17:15:17 | EVOTEC\testuserdel | 4726 | 8077233 | AD1 | Security |
| Domain Controller | Action | Who | When | User Affected | Event ID | Record ID | Gathered From | Gathered LogName |
| * |
|---|
| No data available. |
| * |
| * |
|---|
| No data available. |
| * |
| Domain Controller | Action | Backup Path | Log Type | Who | When | Event ID | Record ID | Gathered From |
|---|---|---|---|---|---|---|---|---|
| AD1.ad.evotec.xyz | The System log file was cleared. | N/A | System | EVOTEC\przemyslaw.klys | 28.04.2019 17:06:42 | 104 | 91365 | AD1 |
| AD1.ad.evotec.xyz | The Setup log file was cleared. | N/A | Setup | EVOTEC\przemyslaw.klys | 28.04.2019 17:06:48 | 104 | 91366 | AD1 |
| Domain Controller | Action | Backup Path | Log Type | Who | When | Event ID | Record ID | Gathered From |
| * |
|---|
| No data available. |
| * |