| Date |
Time |
Event ID |
Event Short Description |
EventType |
Classification |
Source |
User |
Computer |
| 05/24/2002 |
09:46:37 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
robert |
ANDRE2K |
| 05/24/2002 |
09:49:35 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
robert |
ANDRE2K |
| 05/24/2002 |
09:52:34 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
robert |
ANDRE2K |
| 05/24/2002 |
09:55:34 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
robert |
ANDRE2K |
| 05/24/2002 |
09:58:32 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
robert |
ANDRE2K |
| 05/24/2002 |
10:01:29 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
robert |
ANDRE2K |
| 05/24/2002 |
10:04:28 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
robert |
ANDRE2K |
| 05/24/2002 |
10:07:28 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
robert |
ANDRE2K |
| 05/24/2002 |
10:10:38 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
robert |
ANDRE2K |
| 05/24/2002 |
10:14:06 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
robert |
ANDRE2K |
| 05/24/2002 |
10:17:15 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
robert |
ANDRE2K |
| 05/24/2002 |
10:20:19 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
robert |
ANDRE2K |
| 05/24/2002 |
10:23:31 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
robert |
ANDRE2K |
| 05/24/2002 |
10:24:59 |
529 |
LF: Bad user name/password |
Failure audit |
High |
Security |
SYSTEM |
ANDRE2K |
| 05/24/2002 |
10:25:04 |
529 |
LF: Bad user name/password |
Failure audit |
High |
Security |
SYSTEM |
ANDRE2K |
| 05/24/2002 |
10:26:30 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
robert |
ANDRE2K |
| 05/24/2002 |
10:32:49 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
robert |
ANDRE2K |
| 05/24/2002 |
10:35:55 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
robert |
ANDRE2K |
| 05/24/2002 |
10:38:55 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
robert |
ANDRE2K |
| 05/24/2002 |
10:44:59 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
robert |
ANDRE2K |
| 05/24/2002 |
10:51:07 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
robert |
ANDRE2K |
| 05/24/2002 |
10:59:37 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
robert |
ANDRE2K |
| 05/24/2002 |
12:41:49 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
SYSTEM |
ANDRE2K |
| 05/24/2002 |
12:57:38 |
529 |
LF: Bad user name/password |
Failure audit |
High |
Security |
SYSTEM |
ANDRE2K |
| 05/24/2002 |
13:32:20 |
529 |
LF: Bad user name/password |
Failure audit |
High |
Security |
SYSTEM |
ANDRE2K |
| 05/24/2002 |
14:39:49 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
SYSTEM |
ANDRE2K |
| 05/24/2002 |
15:20:21 |
529 |
LF: Bad user name/password |
Failure audit |
High |
Security |
SYSTEM |
ANDRE2K |
| 05/24/2002 |
15:36:20 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
robert |
ANDRE2K |
| 05/24/2002 |
15:36:20 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
ROBERT$ |
ANDRE2K |
| 05/24/2002 |
16:19:50 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
SYSTEM |
ANDRE2K |
| 05/24/2002 |
16:35:09 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
andre |
ANDRE2K |
| 05/24/2002 |
16:35:16 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
andre |
ANDRE2K |
| 05/24/2002 |
16:35:18 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
ANDREVMXP$ |
ANDRE2K |
| 05/24/2002 |
16:35:18 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
andre |
ANDRE2K |
| 05/24/2002 |
16:36:45 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
ANDREVMXP$ |
ANDRE2K |
| 05/24/2002 |
16:41:40 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
andre |
ANDRE2K |
| 05/24/2002 |
16:41:44 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
ANDREVMXP$ |
ANDRE2K |
| 05/24/2002 |
16:41:44 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
andre |
ANDRE2K |
| 05/24/2002 |
16:41:44 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
ANDREVMXP$ |
ANDRE2K |
| 05/24/2002 |
16:41:46 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
ANDREVMXP$ |
ANDRE2K |
| 05/24/2002 |
16:41:49 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
ANDREVMXP$ |
ANDRE2K |
| 05/24/2002 |
16:41:50 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
ANDREVMXP$ |
ANDRE2K |
| 05/24/2002 |
16:41:51 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
ANDREVMXP$ |
ANDRE2K |
| 05/24/2002 |
16:41:51 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
ANDREVMXP$ |
ANDRE2K |
| 05/24/2002 |
16:41:51 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
ANDREVMXP$ |
ANDRE2K |
| 05/24/2002 |
16:41:51 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
ANDREVMXP$ |
ANDRE2K |
| 05/24/2002 |
16:41:51 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
ANDREVMXP$ |
ANDRE2K |
| 05/24/2002 |
16:41:51 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
ANDREVMXP$ |
ANDRE2K |
| 05/24/2002 |
16:41:52 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
ANDREVMXP$ |
ANDRE2K |
| 05/24/2002 |
16:41:55 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
ANDREVMXP$ |
ANDRE2K |
| 05/24/2002 |
16:42:12 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
andre |
ANDRE2K |
| 05/24/2002 |
16:42:49 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
andre |
ANDRE2K |
| 05/24/2002 |
16:42:49 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
andre |
ANDRE2K |
| 05/28/2002 |
11:01:34 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
robert |
ANDRE2K |
| 05/28/2002 |
12:00:33 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
SYSTEM |
ANDRE2K |
| 05/29/2002 |
10:56:51 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
SYSTEM |
ANDRE2K |
| 05/29/2002 |
12:49:51 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
SYSTEM |
ANDRE2K |
| 05/29/2002 |
12:55:29 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
robert |
ANDRE2K |
| 05/29/2002 |
12:58:21 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
robert |
ANDRE2K |
| 05/29/2002 |
12:58:28 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
robert |
ANDRE2K |
| 05/29/2002 |
12:58:28 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
ROBERT$ |
ANDRE2K |
| 05/29/2002 |
13:54:51 |
529 |
LF: Bad user name/password |
Failure audit |
High |
Security |
SYSTEM |
ANDRE2K |
| 05/29/2002 |
14:31:51 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
SYSTEM |
ANDRE2K |
| 05/29/2002 |
16:24:51 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
SYSTEM |
ANDRE2K |
| 05/29/2002 |
16:53:16 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
robert |
ANDRE2K |
| 05/29/2002 |
16:54:45 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
robert |
ANDRE2K |
| 05/29/2002 |
16:55:13 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
robert |
ANDRE2K |
| 05/29/2002 |
16:55:13 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
ROBERT$ |
ANDRE2K |
| 05/29/2002 |
18:09:25 |
528 |
Successful Logon |
Success audit |
High |
Security |
andre |
ANDRE2K |
| 05/30/2002 |
09:49:17 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
SYSTEM |
ANDRE2K |
| 05/30/2002 |
09:49:17 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
SYSTEM |
ANDRE2K |
| 05/30/2002 |
09:49:21 |
643 |
Domain Policy Changed |
Success audit |
High |
Security |
SYSTEM |
ANDRE2K |
| 05/30/2002 |
09:49:25 |
642 |
User Account Changed |
Success audit |
High |
Security |
SYSTEM |
ANDRE2K |
| 05/30/2002 |
09:49:25 |
680 |
Account Used for Logon |
Success audit |
High |
Security |
SYSTEM |
ANDRE2K |
| 05/30/2002 |
11:00:04 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
robert |
ANDRE2K |
| 05/30/2002 |
11:00:05 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
robert |
ANDRE2K |
| 05/30/2002 |
11:00:05 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
ROBERT$ |
ANDRE2K |
| 05/30/2002 |
11:42:23 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
SYSTEM |
ANDRE2K |
| 05/30/2002 |
13:24:23 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
SYSTEM |
ANDRE2K |
| 05/30/2002 |
14:56:24 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
SYSTEM |
ANDRE2K |
| 05/30/2002 |
15:16:30 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
briana |
ANDRE2K |
| 05/30/2002 |
15:16:33 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
BRIANAZ$ |
ANDRE2K |
| 05/30/2002 |
15:17:52 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
sinclair |
ANDRE2K |
| 05/30/2002 |
15:17:53 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
SINCLAIR1$ |
ANDRE2K |
| 05/30/2002 |
15:19:21 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
briana |
ANDRE2K |
| 05/30/2002 |
15:19:23 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
BRIANAZ$ |
ANDRE2K |
| 05/30/2002 |
15:51:51 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
BRIANAZ$ |
ANDRE2K |
| 05/30/2002 |
15:51:51 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
briana |
ANDRE2K |
| 05/30/2002 |
16:28:25 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
SYSTEM |
ANDRE2K |
| 05/30/2002 |
16:31:12 |
529 |
LF: Bad user name/password |
Failure audit |
High |
Security |
SYSTEM |
ANDRE2K |
| 05/30/2002 |
16:31:16 |
529 |
LF: Bad user name/password |
Failure audit |
High |
Security |
SYSTEM |
ANDRE2K |
| 05/30/2002 |
17:05:17 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
robert |
ANDRE2K |
| 05/30/2002 |
17:58:25 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
SYSTEM |
ANDRE2K |
| 05/30/2002 |
18:09:04 |
528 |
Successful Logon |
Success audit |
High |
Security |
andre |
ANDRE2K |
| 05/30/2002 |
18:09:04 |
576 |
Special privileges assigned |
Success audit |
High |
Security |
andre |
ANDRE2K |
| 05/31/2002 |
09:03:40 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
SYSTEM |
ANDRE2K |
| 05/31/2002 |
09:03:40 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
SYSTEM |
ANDRE2K |
| 05/31/2002 |
09:03:58 |
642 |
User Account Changed |
Success audit |
High |
Security |
SYSTEM |
ANDRE2K |
| 05/31/2002 |
09:03:59 |
680 |
Account Used for Logon |
Success audit |
High |
Security |
SYSTEM |
ANDRE2K |
| 05/31/2002 |
09:04:08 |
643 |
Domain Policy Changed |
Success audit |
High |
Security |
SYSTEM |
ANDRE2K |
| 05/31/2002 |
09:57:54 |
529 |
LF: Bad user name/password |
Failure audit |
High |
Security |
SYSTEM |
ANDRE2K |
| 05/31/2002 |
09:57:54 |
529 |
LF: Bad user name/password |
Failure audit |
High |
Security |
SYSTEM |
ANDRE2K |
| 05/31/2002 |
09:57:55 |
539 |
LF: Account locked out |
Failure audit |
High |
Security |
SYSTEM |
ANDRE2K |
| 05/31/2002 |
09:57:55 |
539 |
LF: Account locked out |
Failure audit |
High |
Security |
SYSTEM |
ANDRE2K |
| 05/31/2002 |
09:57:56 |
539 |
LF: Account locked out |
Failure audit |
High |
Security |
SYSTEM |
ANDRE2K |
| 05/31/2002 |
09:57:57 |
539 |
LF: Account locked out |
Failure audit |
High |
Security |
SYSTEM |
ANDRE2K |
| 05/31/2002 |
09:57:57 |
539 |
LF: Account locked out |
Failure audit |
High |
Security |
SYSTEM |
ANDRE2K |
| 05/31/2002 |
09:57:58 |
539 |
LF: Account locked out |
Failure audit |
High |
Security |
SYSTEM |
ANDRE2K |
| 05/31/2002 |
09:57:58 |
539 |
LF: Account locked out |
Failure audit |
High |
Security |
SYSTEM |
ANDRE2K |
| 05/31/2002 |
09:57:59 |
539 |
LF: Account locked out |
Failure audit |
High |
Security |
SYSTEM |
ANDRE2K |
| 05/31/2002 |
09:57:59 |
539 |
LF: Account locked out |
Failure audit |
High |
Security |
SYSTEM |
ANDRE2K |
| 05/31/2002 |
09:57:59 |
539 |
LF: Account locked out |
Failure audit |
High |
Security |
SYSTEM |
ANDRE2K |
| 05/31/2002 |
09:57:59 |
539 |
LF: Account locked out |
Failure audit |
High |
Security |
SYSTEM |
ANDRE2K |
| 05/31/2002 |
09:57:59 |
539 |
LF: Account locked out |
Failure audit |
High |
Security |
SYSTEM |
ANDRE2K |
| 05/31/2002 |
10:15:04 |
680 |
Account Used for Logon |
Success audit |
High |
Security |
SYSTEM |
ANDRE2K |
| 05/31/2002 |
10:15:04 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
Administrator |
ANDRE2K |
| 05/31/2002 |
10:35:09 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
SYSTEM |
ANDRE2K |
| 05/31/2002 |
10:53:28 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
robert |
ANDRE2K |
| 05/31/2002 |
10:53:30 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
robert |
ANDRE2K |
| 05/31/2002 |
10:53:31 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
ROBERT$ |
ANDRE2K |
| 05/31/2002 |
12:18:09 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
SYSTEM |
ANDRE2K |
| 05/31/2002 |
13:58:10 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
SYSTEM |
ANDRE2K |
| 05/31/2002 |
14:52:25 |
540 |
Successful Network Logon |
Success audit |
High |
Security |
nicka |
ANDRE2K |