_raw:
01/09/2026 16:16:12.089
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Administrator
	distinguishedName=CN=Administrator,CN=Users,DC=allports,DC=local
	cn=Administrator
Object Details:
	sAMAccountType=805306368
	sAMAccountName=Administrator
	logonCount=5
	accountExpires=0
	objectSid=S-1-5-21-1355380044-2791429700-3316403701-500
	primaryGroupID=513
	pwdLastSet=05:32.00 PM, Wed 01/07/2026
	lastLogon=06:02.40 PM, Wed 01/07/2026
	lastLogoff=0
	badPasswordTime=04:16.12 PM, Fri 01/09/2026
	countryCode=0
	codePage=0
	badPwdCount=10
	userAccountControl=66048
	objectGUID=a39b079e-3f69-4f54-a206-526d1ed9b2a6
	whenChanged=04:16.12 PM, Fri 01/09/2026
	whenCreated=05:38.38 PM, Wed 01/07/2026
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=34853
	uSNCreated=8196
	instanceType=4
Additional Details:
	lastLogonTimestamp=05:59.48 PM, Wed 01/07/2026
	dSCorePropagationData=20260107225447.0Z|20260107225447.0Z|20260107223938.0Z|16010101181216.0Z
	isCriticalSystemObject=TRUE
	lockoutTime=04:16.12 PM, Fri 01/09/2026
	adminCount=1
	logonHours=<binary>
	memberOf=CN=Policy Administrators,CN=Users,DC=allports,DC=local|CN=Group Policy Creator Owners,CN=Users,DC=allports,DC=local|CN=Domain Admins,CN=Users,DC=allports,DC=local|CN=Enterprise Admins,CN=Users,DC=allports,DC=local|CN=Schema Admins,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	description=Built-in account for administering the computer/domain


_raw:
01/09/2026 16:08:44.402
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=EVILCOMP
	distinguishedName=CN=EVILCOMP,CN=Computers,DC=allports,DC=local
	cn=EVILCOMP
Object Details:
	sAMAccountType=805306369
	sAMAccountName=EVILCOMP$
	logonCount=4
	accountExpires=Never Expires
	objectSid=S-1-5-21-570734437-619670838-1664788539-3960
	primaryGroupID=515
	pwdLastSet=0
	lastLogon=04:02.00 PM, Fri 01/09/2026
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4096
	objectGUID=82721659-4443-49e7-a9b9-38b66e5fa6a3
	whenChanged=04:08.44 PM, Fri 01/09/2026
	whenCreated=03:52.27 PM, Fri 01/09/2026
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=32819
	uSNCreated=32794
	instanceType=4
Additional Details:
	lastLogonTimestamp=03:53.02 PM, Fri 01/09/2026
	mS-DS-CreatorSID=\x01\x05
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	localPolicyFlags=0

_sourcetype: ActiveDirectory

source: ActiveDirectory

sourcetype: ActiveDirectory


_raw:
01/09/2026 16:08:44.386
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=EVILCOMP
	distinguishedName=CN=EVILCOMP,CN=Computers,DC=allports,DC=local
	cn=EVILCOMP
Object Details:
	sAMAccountType=805306369
	sAMAccountName=EVILCOMP$
	logonCount=4
	accountExpires=Never Expires
	objectSid=S-1-5-21-570734437-619670838-1664788539-3960
	primaryGroupID=515
	pwdLastSet=0
	lastLogon=04:02.00 PM, Fri 01/09/2026
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4096
	objectGUID=82721659-4443-49e7-a9b9-38b66e5fa6a3
	whenChanged=04:08.44 PM, Fri 01/09/2026
	whenCreated=03:52.27 PM, Fri 01/09/2026
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=32819
	uSNCreated=32794
	instanceType=4
Additional Details:
	lastLogonTimestamp=03:53.02 PM, Fri 01/09/2026
	mS-DS-CreatorSID=\x01\x05
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	localPolicyFlags=0


_raw:
01/09/2026 16:08:44.385
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=EVILCOMP
	distinguishedName=CN=EVILCOMP,CN=Computers,DC=allports,DC=local
	cn=EVILCOMP
Object Details:
	sAMAccountType=805306369
	sAMAccountName=EVILCOMP$
	logonCount=4
	accountExpires=Never Expires
	objectSid=S-1-5-21-570734437-619670838-1664788539-3960
	primaryGroupID=515
	pwdLastSet=0
	lastLogon=04:02.00 PM, Fri 01/09/2026
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4096
	objectGUID=82721659-4443-49e7-a9b9-38b66e5fa6a3
	whenChanged=04:08.44 PM, Fri 01/09/2026
	whenCreated=03:52.27 PM, Fri 01/09/2026
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=32819
	uSNCreated=32794
	instanceType=4
Additional Details:
	lastLogonTimestamp=03:53.02 PM, Fri 01/09/2026
	mS-DS-CreatorSID=\x01\x05
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	localPolicyFlags=0


_raw:
01/09/2026 16:08:19.939
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=EVILCOMP
	distinguishedName=CN=EVILCOMP,CN=Computers,DC=allports,DC=local
	cn=EVILCOMP
Object Details:
	sAMAccountType=805306369
	sAMAccountName=EVILCOMP$
	logonCount=4
	accountExpires=Never Expires
	objectSid=S-1-5-21-570734437-619670838-1664788539-3960
	primaryGroupID=515
	pwdLastSet=0
	lastLogon=04:02.00 PM, Fri 01/09/2026
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4096
	objectGUID=82721659-4443-49e7-a9b9-38b66e5fa6a3
	whenChanged=04:08.19 PM, Fri 01/09/2026
	whenCreated=03:52.27 PM, Fri 01/09/2026
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=32817
	uSNCreated=32794
	instanceType=4
Additional Details:
	msDS-AllowedToActOnBehalfOfOtherIdentity=\x01
	lastLogonTimestamp=03:53.02 PM, Fri 01/09/2026
	mS-DS-CreatorSID=\x01\x05
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	localPolicyFlags=0


_raw:
01/09/2026 16:08:19.924
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=EVILCOMP
	distinguishedName=CN=EVILCOMP,CN=Computers,DC=allports,DC=local
	cn=EVILCOMP
Object Details:
	sAMAccountType=805306369
	sAMAccountName=EVILCOMP$
	logonCount=4
	accountExpires=Never Expires
	objectSid=S-1-5-21-570734437-619670838-1664788539-3960
	primaryGroupID=515
	pwdLastSet=0
	lastLogon=04:02.00 PM, Fri 01/09/2026
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4096
	objectGUID=82721659-4443-49e7-a9b9-38b66e5fa6a3
	whenChanged=04:08.19 PM, Fri 01/09/2026
	whenCreated=03:52.27 PM, Fri 01/09/2026
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=32817
	uSNCreated=32794
	instanceType=4
Additional Details:
	msDS-AllowedToActOnBehalfOfOtherIdentity=\x01
	lastLogonTimestamp=03:53.02 PM, Fri 01/09/2026
	mS-DS-CreatorSID=\x01\x05
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	localPolicyFlags=0


_raw:
01/09/2026 16:08:19.923
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=EVILCOMP
	distinguishedName=CN=EVILCOMP,CN=Computers,DC=allports,DC=local
	cn=EVILCOMP
Object Details:
	sAMAccountType=805306369
	sAMAccountName=EVILCOMP$
	logonCount=4
	accountExpires=Never Expires
	objectSid=S-1-5-21-570734437-619670838-1664788539-3960
	primaryGroupID=515
	pwdLastSet=0
	lastLogon=04:02.00 PM, Fri 01/09/2026
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4096
	objectGUID=82721659-4443-49e7-a9b9-38b66e5fa6a3
	whenChanged=04:08.19 PM, Fri 01/09/2026
	whenCreated=03:52.27 PM, Fri 01/09/2026
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=32817
	uSNCreated=32794
	instanceType=4
Additional Details:
	msDS-AllowedToActOnBehalfOfOtherIdentity=\x01
	lastLogonTimestamp=03:53.02 PM, Fri 01/09/2026
	mS-DS-CreatorSID=\x01\x05
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	localPolicyFlags=0


_raw:
01/09/2026 16:06:43.088
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=EVILCOMP
	distinguishedName=CN=EVILCOMP,CN=Computers,DC=allports,DC=local
	cn=EVILCOMP
Object Details:
	sAMAccountType=805306369
	sAMAccountName=EVILCOMP$
	logonCount=4
	accountExpires=Never Expires
	objectSid=S-1-5-21-570734437-619670838-1664788539-3960
	primaryGroupID=515
	pwdLastSet=0
	lastLogon=04:02.00 PM, Fri 01/09/2026
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4096
	objectGUID=82721659-4443-49e7-a9b9-38b66e5fa6a3
	whenChanged=04:06.42 PM, Fri 01/09/2026
	whenCreated=03:52.27 PM, Fri 01/09/2026
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=32816
	uSNCreated=32794
	instanceType=4
Additional Details:
	lastLogonTimestamp=03:53.02 PM, Fri 01/09/2026
	mS-DS-CreatorSID=\x01\x05
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	localPolicyFlags=0


_raw:
01/09/2026 16:06:43.079
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=EVILCOMP
	distinguishedName=CN=EVILCOMP,CN=Computers,DC=allports,DC=local
	cn=EVILCOMP
Object Details:
	sAMAccountType=805306369
	sAMAccountName=EVILCOMP$
	logonCount=4
	accountExpires=Never Expires
	objectSid=S-1-5-21-570734437-619670838-1664788539-3960
	primaryGroupID=515
	pwdLastSet=0
	lastLogon=04:02.00 PM, Fri 01/09/2026
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4096
	objectGUID=82721659-4443-49e7-a9b9-38b66e5fa6a3
	whenChanged=04:06.42 PM, Fri 01/09/2026
	whenCreated=03:52.27 PM, Fri 01/09/2026
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=32816
	uSNCreated=32794
	instanceType=4
Additional Details:
	lastLogonTimestamp=03:53.02 PM, Fri 01/09/2026
	mS-DS-CreatorSID=\x01\x05
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	localPolicyFlags=0


_raw:
01/09/2026 16:06:43.045
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=EVILCOMP
	distinguishedName=CN=EVILCOMP,CN=Computers,DC=allports,DC=local
	cn=EVILCOMP
Object Details:
	sAMAccountType=805306369
	sAMAccountName=EVILCOMP$
	logonCount=4
	accountExpires=Never Expires
	objectSid=S-1-5-21-570734437-619670838-1664788539-3960
	primaryGroupID=515
	pwdLastSet=0
	lastLogon=04:02.00 PM, Fri 01/09/2026
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4096
	objectGUID=82721659-4443-49e7-a9b9-38b66e5fa6a3
	whenChanged=04:06.42 PM, Fri 01/09/2026
	whenCreated=03:52.27 PM, Fri 01/09/2026
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=32816
	uSNCreated=32794
	instanceType=4
Additional Details:
	lastLogonTimestamp=03:53.02 PM, Fri 01/09/2026
	mS-DS-CreatorSID=\x01\x05
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	localPolicyFlags=0


_raw:
01/09/2026 16:06:35.709
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=EVILCOMP
	distinguishedName=CN=EVILCOMP,CN=Computers,DC=allports,DC=local
	cn=EVILCOMP
Object Details:
	sAMAccountType=805306369
	sAMAccountName=EVILCOMP$
	logonCount=4
	accountExpires=Never Expires
	objectSid=S-1-5-21-570734437-619670838-1664788539-3960
	primaryGroupID=515
	pwdLastSet=0
	lastLogon=04:02.00 PM, Fri 01/09/2026
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4096
	objectGUID=82721659-4443-49e7-a9b9-38b66e5fa6a3
	whenChanged=04:06.35 PM, Fri 01/09/2026
	whenCreated=03:52.27 PM, Fri 01/09/2026
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=32815
	uSNCreated=32794
	instanceType=4
Additional Details:
	msDS-AllowedToActOnBehalfOfOtherIdentity=\x01
	lastLogonTimestamp=03:53.02 PM, Fri 01/09/2026
	mS-DS-CreatorSID=\x01\x05
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	localPolicyFlags=0


_raw:
01/09/2026 16:06:35.701
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=EVILCOMP
	distinguishedName=CN=EVILCOMP,CN=Computers,DC=allports,DC=local
	cn=EVILCOMP
Object Details:
	sAMAccountType=805306369
	sAMAccountName=EVILCOMP$
	logonCount=4
	accountExpires=Never Expires
	objectSid=S-1-5-21-570734437-619670838-1664788539-3960
	primaryGroupID=515
	pwdLastSet=0
	lastLogon=04:02.00 PM, Fri 01/09/2026
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4096
	objectGUID=82721659-4443-49e7-a9b9-38b66e5fa6a3
	whenChanged=04:06.35 PM, Fri 01/09/2026
	whenCreated=03:52.27 PM, Fri 01/09/2026
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=32815
	uSNCreated=32794
	instanceType=4
Additional Details:
	msDS-AllowedToActOnBehalfOfOtherIdentity=\x01
	lastLogonTimestamp=03:53.02 PM, Fri 01/09/2026
	mS-DS-CreatorSID=\x01\x05
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	localPolicyFlags=0


_raw:
01/09/2026 16:06:35.699
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=EVILCOMP
	distinguishedName=CN=EVILCOMP,CN=Computers,DC=allports,DC=local
	cn=EVILCOMP
Object Details:
	sAMAccountType=805306369
	sAMAccountName=EVILCOMP$
	logonCount=4
	accountExpires=Never Expires
	objectSid=S-1-5-21-570734437-619670838-1664788539-3960
	primaryGroupID=515
	pwdLastSet=0
	lastLogon=04:02.00 PM, Fri 01/09/2026
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4096
	objectGUID=82721659-4443-49e7-a9b9-38b66e5fa6a3
	whenChanged=04:06.35 PM, Fri 01/09/2026
	whenCreated=03:52.27 PM, Fri 01/09/2026
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=32815
	uSNCreated=32794
	instanceType=4
Additional Details:
	msDS-AllowedToActOnBehalfOfOtherIdentity=\x01
	lastLogonTimestamp=03:53.02 PM, Fri 01/09/2026
	mS-DS-CreatorSID=\x01\x05
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	localPolicyFlags=0


_raw:
01/09/2026 16:06:27.128
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=EVILCOMP
	distinguishedName=CN=EVILCOMP,CN=Computers,DC=allports,DC=local
	cn=EVILCOMP
Object Details:
	sAMAccountType=805306369
	sAMAccountName=EVILCOMP$
	logonCount=4
	accountExpires=Never Expires
	objectSid=S-1-5-21-570734437-619670838-1664788539-3960
	primaryGroupID=515
	pwdLastSet=0
	lastLogon=04:02.00 PM, Fri 01/09/2026
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4096
	objectGUID=82721659-4443-49e7-a9b9-38b66e5fa6a3
	whenChanged=04:06.27 PM, Fri 01/09/2026
	whenCreated=03:52.27 PM, Fri 01/09/2026
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=32814
	uSNCreated=32794
	instanceType=4
Additional Details:
	msDS-AllowedToActOnBehalfOfOtherIdentity=\x01
	lastLogonTimestamp=03:53.02 PM, Fri 01/09/2026
	mS-DS-CreatorSID=\x01\x05
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	localPolicyFlags=0


_raw:
01/09/2026 16:06:27.119
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=EVILCOMP
	distinguishedName=CN=EVILCOMP,CN=Computers,DC=allports,DC=local
	cn=EVILCOMP
Object Details:
	sAMAccountType=805306369
	sAMAccountName=EVILCOMP$
	logonCount=4
	accountExpires=Never Expires
	objectSid=S-1-5-21-570734437-619670838-1664788539-3960
	primaryGroupID=515
	pwdLastSet=0
	lastLogon=04:02.00 PM, Fri 01/09/2026
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4096
	objectGUID=82721659-4443-49e7-a9b9-38b66e5fa6a3
	whenChanged=04:06.27 PM, Fri 01/09/2026
	whenCreated=03:52.27 PM, Fri 01/09/2026
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=32814
	uSNCreated=32794
	instanceType=4
Additional Details:
	msDS-AllowedToActOnBehalfOfOtherIdentity=\x01
	lastLogonTimestamp=03:53.02 PM, Fri 01/09/2026
	mS-DS-CreatorSID=\x01\x05
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	localPolicyFlags=0


_raw:
01/09/2026 16:06:27.118
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=EVILCOMP
	distinguishedName=CN=EVILCOMP,CN=Computers,DC=allports,DC=local
	cn=EVILCOMP
Object Details:
	sAMAccountType=805306369
	sAMAccountName=EVILCOMP$
	logonCount=4
	accountExpires=Never Expires
	objectSid=S-1-5-21-570734437-619670838-1664788539-3960
	primaryGroupID=515
	pwdLastSet=0
	lastLogon=04:02.00 PM, Fri 01/09/2026
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4096
	objectGUID=82721659-4443-49e7-a9b9-38b66e5fa6a3
	whenChanged=04:06.27 PM, Fri 01/09/2026
	whenCreated=03:52.27 PM, Fri 01/09/2026
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=32814
	uSNCreated=32794
	instanceType=4
Additional Details:
	msDS-AllowedToActOnBehalfOfOtherIdentity=\x01
	lastLogonTimestamp=03:53.02 PM, Fri 01/09/2026
	mS-DS-CreatorSID=\x01\x05
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	localPolicyFlags=0


_raw:
01/09/2026 16:04:34.303
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=EVILCOMP
	distinguishedName=CN=EVILCOMP,CN=Computers,DC=allports,DC=local
	cn=EVILCOMP
Object Details:
	sAMAccountType=805306369
	sAMAccountName=EVILCOMP$
	logonCount=4
	accountExpires=Never Expires
	objectSid=S-1-5-21-570734437-619670838-1664788539-3960
	primaryGroupID=515
	pwdLastSet=0
	lastLogon=04:02.00 PM, Fri 01/09/2026
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4096
	objectGUID=82721659-4443-49e7-a9b9-38b66e5fa6a3
	whenChanged=04:04.34 PM, Fri 01/09/2026
	whenCreated=03:52.27 PM, Fri 01/09/2026
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=32813
	uSNCreated=32794
	instanceType=4
Additional Details:
	msDS-AllowedToActOnBehalfOfOtherIdentity=\x01
	lastLogonTimestamp=03:53.02 PM, Fri 01/09/2026
	mS-DS-CreatorSID=\x01\x05
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	localPolicyFlags=0


_raw:
01/09/2026 16:04:34.301
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=EVILCOMP
	distinguishedName=CN=EVILCOMP,CN=Computers,DC=allports,DC=local
	cn=EVILCOMP
Object Details:
	sAMAccountType=805306369
	sAMAccountName=EVILCOMP$
	logonCount=4
	accountExpires=Never Expires
	objectSid=S-1-5-21-570734437-619670838-1664788539-3960
	primaryGroupID=515
	pwdLastSet=0
	lastLogon=04:02.00 PM, Fri 01/09/2026
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4096
	objectGUID=82721659-4443-49e7-a9b9-38b66e5fa6a3
	whenChanged=04:04.34 PM, Fri 01/09/2026
	whenCreated=03:52.27 PM, Fri 01/09/2026
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=32813
	uSNCreated=32794
	instanceType=4
Additional Details:
	msDS-AllowedToActOnBehalfOfOtherIdentity=\x01
	lastLogonTimestamp=03:53.02 PM, Fri 01/09/2026
	mS-DS-CreatorSID=\x01\x05
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	localPolicyFlags=0


_raw:
01/09/2026 16:04:34.296
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=EVILCOMP
	distinguishedName=CN=EVILCOMP,CN=Computers,DC=allports,DC=local
	cn=EVILCOMP
Object Details:
	sAMAccountType=805306369
	sAMAccountName=EVILCOMP$
	logonCount=4
	accountExpires=Never Expires
	objectSid=S-1-5-21-570734437-619670838-1664788539-3960
	primaryGroupID=515
	pwdLastSet=0
	lastLogon=04:02.00 PM, Fri 01/09/2026
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4096
	objectGUID=82721659-4443-49e7-a9b9-38b66e5fa6a3
	whenChanged=04:04.34 PM, Fri 01/09/2026
	whenCreated=03:52.27 PM, Fri 01/09/2026
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=32813
	uSNCreated=32794
	instanceType=4
Additional Details:
	msDS-AllowedToActOnBehalfOfOtherIdentity=\x01
	lastLogonTimestamp=03:53.02 PM, Fri 01/09/2026
	mS-DS-CreatorSID=\x01\x05
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	localPolicyFlags=0


_raw:
01/09/2026 16:04:12.529
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=EVILCOMP
	distinguishedName=CN=EVILCOMP,CN=Computers,DC=allports,DC=local
	cn=EVILCOMP
Object Details:
	sAMAccountType=805306369
	sAMAccountName=EVILCOMP$
	logonCount=4
	accountExpires=Never Expires
	objectSid=S-1-5-21-570734437-619670838-1664788539-3960
	primaryGroupID=515
	pwdLastSet=0
	lastLogon=04:02.00 PM, Fri 01/09/2026
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4096
	objectGUID=82721659-4443-49e7-a9b9-38b66e5fa6a3
	whenChanged=04:04.12 PM, Fri 01/09/2026
	whenCreated=03:52.27 PM, Fri 01/09/2026
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=32812
	uSNCreated=32794
	instanceType=4
Additional Details:
	msDS-AllowedToActOnBehalfOfOtherIdentity=\x01
	lastLogonTimestamp=03:53.02 PM, Fri 01/09/2026
	mS-DS-CreatorSID=\x01\x05
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	localPolicyFlags=0


_raw:
01/09/2026 16:04:12.525
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=EVILCOMP
	distinguishedName=CN=EVILCOMP,CN=Computers,DC=allports,DC=local
	cn=EVILCOMP
Object Details:
	sAMAccountType=805306369
	sAMAccountName=EVILCOMP$
	logonCount=4
	accountExpires=Never Expires
	objectSid=S-1-5-21-570734437-619670838-1664788539-3960
	primaryGroupID=515
	pwdLastSet=0
	lastLogon=04:02.00 PM, Fri 01/09/2026
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4096
	objectGUID=82721659-4443-49e7-a9b9-38b66e5fa6a3
	whenChanged=04:04.12 PM, Fri 01/09/2026
	whenCreated=03:52.27 PM, Fri 01/09/2026
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=32812
	uSNCreated=32794
	instanceType=4
Additional Details:
	msDS-AllowedToActOnBehalfOfOtherIdentity=\x01
	lastLogonTimestamp=03:53.02 PM, Fri 01/09/2026
	mS-DS-CreatorSID=\x01\x05
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	localPolicyFlags=0


_raw:
01/09/2026 16:04:12.523
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=EVILCOMP
	distinguishedName=CN=EVILCOMP,CN=Computers,DC=allports,DC=local
	cn=EVILCOMP
Object Details:
	sAMAccountType=805306369
	sAMAccountName=EVILCOMP$
	logonCount=4
	accountExpires=Never Expires
	objectSid=S-1-5-21-570734437-619670838-1664788539-3960
	primaryGroupID=515
	pwdLastSet=0
	lastLogon=04:02.00 PM, Fri 01/09/2026
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4096
	objectGUID=82721659-4443-49e7-a9b9-38b66e5fa6a3
	whenChanged=04:04.12 PM, Fri 01/09/2026
	whenCreated=03:52.27 PM, Fri 01/09/2026
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=32812
	uSNCreated=32794
	instanceType=4
Additional Details:
	msDS-AllowedToActOnBehalfOfOtherIdentity=\x01
	lastLogonTimestamp=03:53.02 PM, Fri 01/09/2026
	mS-DS-CreatorSID=\x01\x05
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	localPolicyFlags=0


_raw:
01/09/2026 16:03:31.990
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Administrator
	distinguishedName=CN=Administrator,CN=Users,DC=allports,DC=local
	cn=Administrator
Object Details:
	sAMAccountType=805306368
	sAMAccountName=Administrator
	logonCount=5
	accountExpires=0
	objectSid=S-1-5-21-1355380044-2791429700-3316403701-500
	primaryGroupID=513
	pwdLastSet=05:32.00 PM, Wed 01/07/2026
	lastLogon=06:02.40 PM, Wed 01/07/2026
	lastLogoff=0
	badPasswordTime=04:03.31 PM, Fri 01/09/2026
	countryCode=0
	codePage=0
	badPwdCount=12
	userAccountControl=66048
	objectGUID=a39b079e-3f69-4f54-a206-526d1ed9b2a6
	whenChanged=04:03.31 PM, Fri 01/09/2026
	whenCreated=05:38.38 PM, Wed 01/07/2026
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=34840
	uSNCreated=8196
	instanceType=4
Additional Details:
	lastLogonTimestamp=05:59.48 PM, Wed 01/07/2026
	dSCorePropagationData=20260107225447.0Z|20260107225447.0Z|20260107223938.0Z|16010101181216.0Z
	isCriticalSystemObject=TRUE
	lockoutTime=04:03.31 PM, Fri 01/09/2026
	adminCount=1
	logonHours=<binary>
	memberOf=CN=Policy Administrators,CN=Users,DC=allports,DC=local|CN=Group Policy Creator Owners,CN=Users,DC=allports,DC=local|CN=Domain Admins,CN=Users,DC=allports,DC=local|CN=Enterprise Admins,CN=Users,DC=allports,DC=local|CN=Schema Admins,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	description=Built-in account for administering the computer/domain


_raw:
01/09/2026 16:03:31.973
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Administrator
	distinguishedName=CN=Administrator,CN=Users,DC=allports,DC=local
	cn=Administrator
Object Details:
	sAMAccountType=805306368
	sAMAccountName=Administrator
	logonCount=5
	accountExpires=0
	objectSid=S-1-5-21-1355380044-2791429700-3316403701-500
	primaryGroupID=513
	pwdLastSet=05:32.00 PM, Wed 01/07/2026
	lastLogon=06:02.40 PM, Wed 01/07/2026
	lastLogoff=0
	badPasswordTime=04:03.31 PM, Fri 01/09/2026
	countryCode=0
	codePage=0
	badPwdCount=12
	userAccountControl=66048
	objectGUID=a39b079e-3f69-4f54-a206-526d1ed9b2a6
	whenChanged=04:03.31 PM, Fri 01/09/2026
	whenCreated=05:38.38 PM, Wed 01/07/2026
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=34840
	uSNCreated=8196
	instanceType=4
Additional Details:
	lastLogonTimestamp=05:59.48 PM, Wed 01/07/2026
	dSCorePropagationData=20260107225447.0Z|20260107225447.0Z|20260107223938.0Z|16010101181216.0Z
	isCriticalSystemObject=TRUE
	lockoutTime=04:03.31 PM, Fri 01/09/2026
	adminCount=1
	logonHours=<binary>
	memberOf=CN=Policy Administrators,CN=Users,DC=allports,DC=local|CN=Group Policy Creator Owners,CN=Users,DC=allports,DC=local|CN=Domain Admins,CN=Users,DC=allports,DC=local|CN=Enterprise Admins,CN=Users,DC=allports,DC=local|CN=Schema Admins,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	description=Built-in account for administering the computer/domain


_raw:
01/09/2026 16:03:31.969
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Administrator
	distinguishedName=CN=Administrator,CN=Users,DC=allports,DC=local
	cn=Administrator
Object Details:
	sAMAccountType=805306368
	sAMAccountName=Administrator
	logonCount=5
	accountExpires=0
	objectSid=S-1-5-21-1355380044-2791429700-3316403701-500
	primaryGroupID=513
	pwdLastSet=05:32.00 PM, Wed 01/07/2026
	lastLogon=06:02.40 PM, Wed 01/07/2026
	lastLogoff=0
	badPasswordTime=04:03.31 PM, Fri 01/09/2026
	countryCode=0
	codePage=0
	badPwdCount=12
	userAccountControl=66048
	objectGUID=a39b079e-3f69-4f54-a206-526d1ed9b2a6
	whenChanged=04:03.31 PM, Fri 01/09/2026
	whenCreated=05:38.38 PM, Wed 01/07/2026
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=34840
	uSNCreated=8196
	instanceType=4
Additional Details:
	lastLogonTimestamp=05:59.48 PM, Wed 01/07/2026
	dSCorePropagationData=20260107225447.0Z|20260107225447.0Z|20260107223938.0Z|16010101181216.0Z
	isCriticalSystemObject=TRUE
	lockoutTime=04:03.31 PM, Fri 01/09/2026
	adminCount=1
	logonHours=<binary>
	memberOf=CN=Policy Administrators,CN=Users,DC=allports,DC=local|CN=Group Policy Creator Owners,CN=Users,DC=allports,DC=local|CN=Domain Admins,CN=Users,DC=allports,DC=local|CN=Enterprise Admins,CN=Users,DC=allports,DC=local|CN=Schema Admins,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	description=Built-in account for administering the computer/domain


_raw:
01/09/2026 16:03:31.943
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Administrator
	distinguishedName=CN=Administrator,CN=Users,DC=allports,DC=local
	cn=Administrator
Object Details:
	sAMAccountType=805306368
	sAMAccountName=Administrator
	logonCount=5
	accountExpires=0
	objectSid=S-1-5-21-1355380044-2791429700-3316403701-500
	primaryGroupID=513
	pwdLastSet=05:32.00 PM, Wed 01/07/2026
	lastLogon=06:02.40 PM, Wed 01/07/2026
	lastLogoff=0
	badPasswordTime=04:03.31 PM, Fri 01/09/2026
	countryCode=0
	codePage=0
	badPwdCount=11
	userAccountControl=66048
	objectGUID=a39b079e-3f69-4f54-a206-526d1ed9b2a6
	whenChanged=04:03.31 PM, Fri 01/09/2026
	whenCreated=05:38.38 PM, Wed 01/07/2026
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=34838
	uSNCreated=8196
	instanceType=4
Additional Details:
	lastLogonTimestamp=05:59.48 PM, Wed 01/07/2026
	dSCorePropagationData=20260107225447.0Z|20260107225447.0Z|20260107223938.0Z|16010101181216.0Z
	isCriticalSystemObject=TRUE
	lockoutTime=04:03.31 PM, Fri 01/09/2026
	adminCount=1
	logonHours=<binary>
	memberOf=CN=Policy Administrators,CN=Users,DC=allports,DC=local|CN=Group Policy Creator Owners,CN=Users,DC=allports,DC=local|CN=Domain Admins,CN=Users,DC=allports,DC=local|CN=Enterprise Admins,CN=Users,DC=allports,DC=local|CN=Schema Admins,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	description=Built-in account for administering the computer/domain


_raw:
01/09/2026 16:03:31.938
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Administrator
	distinguishedName=CN=Administrator,CN=Users,DC=allports,DC=local
	cn=Administrator
Object Details:
	sAMAccountType=805306368
	sAMAccountName=Administrator
	logonCount=5
	accountExpires=0
	objectSid=S-1-5-21-1355380044-2791429700-3316403701-500
	primaryGroupID=513
	pwdLastSet=05:32.00 PM, Wed 01/07/2026
	lastLogon=06:02.40 PM, Wed 01/07/2026
	lastLogoff=0
	badPasswordTime=04:03.31 PM, Fri 01/09/2026
	countryCode=0
	codePage=0
	badPwdCount=11
	userAccountControl=66048
	objectGUID=a39b079e-3f69-4f54-a206-526d1ed9b2a6
	whenChanged=04:03.31 PM, Fri 01/09/2026
	whenCreated=05:38.38 PM, Wed 01/07/2026
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=34838
	uSNCreated=8196
	instanceType=4
Additional Details:
	lastLogonTimestamp=05:59.48 PM, Wed 01/07/2026
	dSCorePropagationData=20260107225447.0Z|20260107225447.0Z|20260107223938.0Z|16010101181216.0Z
	isCriticalSystemObject=TRUE
	lockoutTime=04:03.31 PM, Fri 01/09/2026
	adminCount=1
	logonHours=<binary>
	memberOf=CN=Policy Administrators,CN=Users,DC=allports,DC=local|CN=Group Policy Creator Owners,CN=Users,DC=allports,DC=local|CN=Domain Admins,CN=Users,DC=allports,DC=local|CN=Enterprise Admins,CN=Users,DC=allports,DC=local|CN=Schema Admins,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	description=Built-in account for administering the computer/domain


_raw:
01/09/2026 16:03:31.926
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Administrator
	distinguishedName=CN=Administrator,CN=Users,DC=allports,DC=local
	cn=Administrator
Object Details:
	sAMAccountType=805306368
	sAMAccountName=Administrator
	logonCount=5
	accountExpires=0
	objectSid=S-1-5-21-1355380044-2791429700-3316403701-500
	primaryGroupID=513
	pwdLastSet=05:32.00 PM, Wed 01/07/2026
	lastLogon=06:02.40 PM, Wed 01/07/2026
	lastLogoff=0
	badPasswordTime=04:03.31 PM, Fri 01/09/2026
	countryCode=0
	codePage=0
	badPwdCount=11
	userAccountControl=66048
	objectGUID=a39b079e-3f69-4f54-a206-526d1ed9b2a6
	whenChanged=04:03.31 PM, Fri 01/09/2026
	whenCreated=05:38.38 PM, Wed 01/07/2026
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=34838
	uSNCreated=8196
	instanceType=4
Additional Details:
	lastLogonTimestamp=05:59.48 PM, Wed 01/07/2026
	dSCorePropagationData=20260107225447.0Z|20260107225447.0Z|20260107223938.0Z|16010101181216.0Z
	isCriticalSystemObject=TRUE
	lockoutTime=04:03.31 PM, Fri 01/09/2026
	adminCount=1
	logonHours=<binary>
	memberOf=CN=Policy Administrators,CN=Users,DC=allports,DC=local|CN=Group Policy Creator Owners,CN=Users,DC=allports,DC=local|CN=Domain Admins,CN=Users,DC=allports,DC=local|CN=Enterprise Admins,CN=Users,DC=allports,DC=local|CN=Schema Admins,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	description=Built-in account for administering the computer/domain


_raw:
01/09/2026 16:03:31.897
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Administrator
	distinguishedName=CN=Administrator,CN=Users,DC=allports,DC=local
	cn=Administrator
Object Details:
	sAMAccountType=805306368
	sAMAccountName=Administrator
	logonCount=5
	accountExpires=0
	objectSid=S-1-5-21-1355380044-2791429700-3316403701-500
	primaryGroupID=513
	pwdLastSet=05:32.00 PM, Wed 01/07/2026
	lastLogon=06:02.40 PM, Wed 01/07/2026
	lastLogoff=0
	badPasswordTime=04:03.31 PM, Fri 01/09/2026
	countryCode=0
	codePage=0
	badPwdCount=10
	userAccountControl=66048
	objectGUID=a39b079e-3f69-4f54-a206-526d1ed9b2a6
	whenChanged=04:03.31 PM, Fri 01/09/2026
	whenCreated=05:38.38 PM, Wed 01/07/2026
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=34836
	uSNCreated=8196
	instanceType=4
Additional Details:
	lastLogonTimestamp=05:59.48 PM, Wed 01/07/2026
	dSCorePropagationData=20260107225447.0Z|20260107225447.0Z|20260107223938.0Z|16010101181216.0Z
	isCriticalSystemObject=TRUE
	lockoutTime=04:03.31 PM, Fri 01/09/2026
	adminCount=1
	logonHours=<binary>
	memberOf=CN=Policy Administrators,CN=Users,DC=allports,DC=local|CN=Group Policy Creator Owners,CN=Users,DC=allports,DC=local|CN=Domain Admins,CN=Users,DC=allports,DC=local|CN=Enterprise Admins,CN=Users,DC=allports,DC=local|CN=Schema Admins,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	description=Built-in account for administering the computer/domain


_raw:
01/09/2026 16:03:31.879
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Administrator
	distinguishedName=CN=Administrator,CN=Users,DC=allports,DC=local
	cn=Administrator
Object Details:
	sAMAccountType=805306368
	sAMAccountName=Administrator
	logonCount=5
	accountExpires=0
	objectSid=S-1-5-21-1355380044-2791429700-3316403701-500
	primaryGroupID=513
	pwdLastSet=05:32.00 PM, Wed 01/07/2026
	lastLogon=06:02.40 PM, Wed 01/07/2026
	lastLogoff=0
	badPasswordTime=04:03.31 PM, Fri 01/09/2026
	countryCode=0
	codePage=0
	badPwdCount=10
	userAccountControl=66048
	objectGUID=a39b079e-3f69-4f54-a206-526d1ed9b2a6
	whenChanged=04:03.31 PM, Fri 01/09/2026
	whenCreated=05:38.38 PM, Wed 01/07/2026
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=34836
	uSNCreated=8196
	instanceType=4
Additional Details:
	lastLogonTimestamp=05:59.48 PM, Wed 01/07/2026
	dSCorePropagationData=20260107225447.0Z|20260107225447.0Z|20260107223938.0Z|16010101181216.0Z
	isCriticalSystemObject=TRUE
	lockoutTime=04:03.31 PM, Fri 01/09/2026
	adminCount=1
	logonHours=<binary>
	memberOf=CN=Policy Administrators,CN=Users,DC=allports,DC=local|CN=Group Policy Creator Owners,CN=Users,DC=allports,DC=local|CN=Domain Admins,CN=Users,DC=allports,DC=local|CN=Enterprise Admins,CN=Users,DC=allports,DC=local|CN=Schema Admins,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	description=Built-in account for administering the computer/domain


_raw:
01/09/2026 16:03:31.875
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Administrator
	distinguishedName=CN=Administrator,CN=Users,DC=allports,DC=local
	cn=Administrator
Object Details:
	sAMAccountType=805306368
	sAMAccountName=Administrator
	logonCount=5
	accountExpires=0
	objectSid=S-1-5-21-1355380044-2791429700-3316403701-500
	primaryGroupID=513
	pwdLastSet=05:32.00 PM, Wed 01/07/2026
	lastLogon=06:02.40 PM, Wed 01/07/2026
	lastLogoff=0
	badPasswordTime=04:03.31 PM, Fri 01/09/2026
	countryCode=0
	codePage=0
	badPwdCount=10
	userAccountControl=66048
	objectGUID=a39b079e-3f69-4f54-a206-526d1ed9b2a6
	whenChanged=04:03.31 PM, Fri 01/09/2026
	whenCreated=05:38.38 PM, Wed 01/07/2026
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=34836
	uSNCreated=8196
	instanceType=4
Additional Details:
	lastLogonTimestamp=05:59.48 PM, Wed 01/07/2026
	dSCorePropagationData=20260107225447.0Z|20260107225447.0Z|20260107223938.0Z|16010101181216.0Z
	isCriticalSystemObject=TRUE
	lockoutTime=04:03.31 PM, Fri 01/09/2026
	adminCount=1
	logonHours=<binary>
	memberOf=CN=Policy Administrators,CN=Users,DC=allports,DC=local|CN=Group Policy Creator Owners,CN=Users,DC=allports,DC=local|CN=Domain Admins,CN=Users,DC=allports,DC=local|CN=Enterprise Admins,CN=Users,DC=allports,DC=local|CN=Schema Admins,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	description=Built-in account for administering the computer/domain


_raw:
01/09/2026 16:01:06.727
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=EVILCOMP
	distinguishedName=CN=EVILCOMP,CN=Computers,DC=allports,DC=local
	cn=EVILCOMP
Object Details:
	sAMAccountType=805306369
	sAMAccountName=EVILCOMP$
	logonCount=1
	accountExpires=Never Expires
	objectSid=S-1-5-21-570734437-619670838-1664788539-3960
	primaryGroupID=515
	pwdLastSet=0
	lastLogon=03:53.02 PM, Fri 01/09/2026
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4096
	objectGUID=82721659-4443-49e7-a9b9-38b66e5fa6a3
	whenChanged=04:01.06 PM, Fri 01/09/2026
	whenCreated=03:52.27 PM, Fri 01/09/2026
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=32808
	uSNCreated=32794
	instanceType=4
Additional Details:
	msDS-AllowedToActOnBehalfOfOtherIdentity=\x01
	lastLogonTimestamp=03:53.02 PM, Fri 01/09/2026
	mS-DS-CreatorSID=\x01\x05
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	localPolicyFlags=0


_raw:
01/09/2026 16:01:06.721
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=EVILCOMP
	distinguishedName=CN=EVILCOMP,CN=Computers,DC=allports,DC=local
	cn=EVILCOMP
Object Details:
	sAMAccountType=805306369
	sAMAccountName=EVILCOMP$
	logonCount=1
	accountExpires=Never Expires
	objectSid=S-1-5-21-570734437-619670838-1664788539-3960
	primaryGroupID=515
	pwdLastSet=0
	lastLogon=03:53.02 PM, Fri 01/09/2026
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4096
	objectGUID=82721659-4443-49e7-a9b9-38b66e5fa6a3
	whenChanged=04:01.06 PM, Fri 01/09/2026
	whenCreated=03:52.27 PM, Fri 01/09/2026
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=32808
	uSNCreated=32794
	instanceType=4
Additional Details:
	msDS-AllowedToActOnBehalfOfOtherIdentity=\x01
	lastLogonTimestamp=03:53.02 PM, Fri 01/09/2026
	mS-DS-CreatorSID=\x01\x05
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	localPolicyFlags=0


_raw:
01/09/2026 16:00:36.044
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=EVILCOMP
	distinguishedName=CN=EVILCOMP,CN=Computers,DC=allports,DC=local
	cn=EVILCOMP
Object Details:
	sAMAccountType=805306369
	sAMAccountName=EVILCOMP$
	logonCount=1
	accountExpires=Never Expires
	objectSid=S-1-5-21-570734437-619670838-1664788539-3960
	primaryGroupID=515
	pwdLastSet=0
	lastLogon=03:53.02 PM, Fri 01/09/2026
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4096
	objectGUID=82721659-4443-49e7-a9b9-38b66e5fa6a3
	whenChanged=04:00.36 PM, Fri 01/09/2026
	whenCreated=03:52.27 PM, Fri 01/09/2026
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=32806
	uSNCreated=32794
	instanceType=4
Additional Details:
	lastLogonTimestamp=03:53.02 PM, Fri 01/09/2026
	mS-DS-CreatorSID=\x01\x05
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	localPolicyFlags=0


_raw:
01/09/2026 16:00:36.039
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=EVILCOMP
	distinguishedName=CN=EVILCOMP,CN=Computers,DC=allports,DC=local
	cn=EVILCOMP
Object Details:
	sAMAccountType=805306369
	sAMAccountName=EVILCOMP$
	logonCount=1
	accountExpires=Never Expires
	objectSid=S-1-5-21-570734437-619670838-1664788539-3960
	primaryGroupID=515
	pwdLastSet=0
	lastLogon=03:53.02 PM, Fri 01/09/2026
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4096
	objectGUID=82721659-4443-49e7-a9b9-38b66e5fa6a3
	whenChanged=04:00.36 PM, Fri 01/09/2026
	whenCreated=03:52.27 PM, Fri 01/09/2026
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=32806
	uSNCreated=32794
	instanceType=4
Additional Details:
	lastLogonTimestamp=03:53.02 PM, Fri 01/09/2026
	mS-DS-CreatorSID=\x01\x05
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	localPolicyFlags=0


_raw:
01/09/2026 16:00:36.038
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=EVILCOMP
	distinguishedName=CN=EVILCOMP,CN=Computers,DC=allports,DC=local
	cn=EVILCOMP
Object Details:
	sAMAccountType=805306369
	sAMAccountName=EVILCOMP$
	logonCount=1
	accountExpires=Never Expires
	objectSid=S-1-5-21-570734437-619670838-1664788539-3960
	primaryGroupID=515
	pwdLastSet=0
	lastLogon=03:53.02 PM, Fri 01/09/2026
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4096
	objectGUID=82721659-4443-49e7-a9b9-38b66e5fa6a3
	whenChanged=04:00.36 PM, Fri 01/09/2026
	whenCreated=03:52.27 PM, Fri 01/09/2026
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=32806
	uSNCreated=32794
	instanceType=4
Additional Details:
	lastLogonTimestamp=03:53.02 PM, Fri 01/09/2026
	mS-DS-CreatorSID=\x01\x05
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	localPolicyFlags=0


_raw:
01/09/2026 15:53:02.359
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=EVILCOMP
	distinguishedName=CN=EVILCOMP,CN=Computers,DC=allports,DC=local
	cn=EVILCOMP
Object Details:
	sAMAccountType=805306369
	sAMAccountName=EVILCOMP$
	logonCount=1
	accountExpires=Never Expires
	objectSid=S-1-5-21-570734437-619670838-1664788539-3960
	primaryGroupID=515
	pwdLastSet=0
	lastLogon=03:53.02 PM, Fri 01/09/2026
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4096
	objectGUID=82721659-4443-49e7-a9b9-38b66e5fa6a3
	whenChanged=03:53.02 PM, Fri 01/09/2026
	whenCreated=03:52.27 PM, Fri 01/09/2026
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=32800
	uSNCreated=32794
	instanceType=4
Additional Details:
	msDS-AllowedToActOnBehalfOfOtherIdentity=\x01
	lastLogonTimestamp=03:53.02 PM, Fri 01/09/2026
	mS-DS-CreatorSID=\x01\x05
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	localPolicyFlags=0


_raw:
01/09/2026 15:53:02.340
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=EVILCOMP
	distinguishedName=CN=EVILCOMP,CN=Computers,DC=allports,DC=local
	cn=EVILCOMP
Object Details:
	sAMAccountType=805306369
	sAMAccountName=EVILCOMP$
	logonCount=1
	accountExpires=Never Expires
	objectSid=S-1-5-21-570734437-619670838-1664788539-3960
	primaryGroupID=515
	pwdLastSet=0
	lastLogon=03:53.02 PM, Fri 01/09/2026
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4096
	objectGUID=82721659-4443-49e7-a9b9-38b66e5fa6a3
	whenChanged=03:53.02 PM, Fri 01/09/2026
	whenCreated=03:52.27 PM, Fri 01/09/2026
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=32800
	uSNCreated=32794
	instanceType=4
Additional Details:
	msDS-AllowedToActOnBehalfOfOtherIdentity=\x01
	lastLogonTimestamp=03:53.02 PM, Fri 01/09/2026
	mS-DS-CreatorSID=\x01\x05
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	localPolicyFlags=0


_raw:
01/09/2026 15:53:02.337
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=EVILCOMP
	distinguishedName=CN=EVILCOMP,CN=Computers,DC=allports,DC=local
	cn=EVILCOMP
Object Details:
	sAMAccountType=805306369
	sAMAccountName=EVILCOMP$
	logonCount=1
	accountExpires=Never Expires
	objectSid=S-1-5-21-570734437-619670838-1664788539-3960
	primaryGroupID=515
	pwdLastSet=0
	lastLogon=03:53.02 PM, Fri 01/09/2026
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4096
	objectGUID=82721659-4443-49e7-a9b9-38b66e5fa6a3
	whenChanged=03:53.02 PM, Fri 01/09/2026
	whenCreated=03:52.27 PM, Fri 01/09/2026
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=32800
	uSNCreated=32794
	instanceType=4
Additional Details:
	msDS-AllowedToActOnBehalfOfOtherIdentity=\x01
	lastLogonTimestamp=03:53.02 PM, Fri 01/09/2026
	mS-DS-CreatorSID=\x01\x05
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	localPolicyFlags=0


_raw:
01/09/2026 15:52:43.308
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=EVILCOMP
	distinguishedName=CN=EVILCOMP,CN=Computers,DC=allports,DC=local
	cn=EVILCOMP
Object Details:
	sAMAccountType=805306369
	sAMAccountName=EVILCOMP$
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-570734437-619670838-1664788539-3960
	primaryGroupID=515
	pwdLastSet=0
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4096
	objectGUID=82721659-4443-49e7-a9b9-38b66e5fa6a3
	whenChanged=03:52.43 PM, Fri 01/09/2026
	whenCreated=03:52.27 PM, Fri 01/09/2026
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=32799
	uSNCreated=32794
	instanceType=4
Additional Details:
	msDS-AllowedToActOnBehalfOfOtherIdentity=\x01
	mS-DS-CreatorSID=\x01\x05
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	localPolicyFlags=0


_raw:
01/09/2026 15:52:43.302
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=EVILCOMP
	distinguishedName=CN=EVILCOMP,CN=Computers,DC=allports,DC=local
	cn=EVILCOMP
Object Details:
	sAMAccountType=805306369
	sAMAccountName=EVILCOMP$
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-570734437-619670838-1664788539-3960
	primaryGroupID=515
	pwdLastSet=0
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4096
	objectGUID=82721659-4443-49e7-a9b9-38b66e5fa6a3
	whenChanged=03:52.43 PM, Fri 01/09/2026
	whenCreated=03:52.27 PM, Fri 01/09/2026
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=32799
	uSNCreated=32794
	instanceType=4
Additional Details:
	msDS-AllowedToActOnBehalfOfOtherIdentity=\x01
	mS-DS-CreatorSID=\x01\x05
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	localPolicyFlags=0


_raw:
01/09/2026 15:52:43.299
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=EVILCOMP
	distinguishedName=CN=EVILCOMP,CN=Computers,DC=allports,DC=local
	cn=EVILCOMP
Object Details:
	sAMAccountType=805306369
	sAMAccountName=EVILCOMP$
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-570734437-619670838-1664788539-3960
	primaryGroupID=515
	pwdLastSet=0
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4096
	objectGUID=82721659-4443-49e7-a9b9-38b66e5fa6a3
	whenChanged=03:52.43 PM, Fri 01/09/2026
	whenCreated=03:52.27 PM, Fri 01/09/2026
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=32799
	uSNCreated=32794
	instanceType=4
Additional Details:
	msDS-AllowedToActOnBehalfOfOtherIdentity=\x01
	mS-DS-CreatorSID=\x01\x05
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	localPolicyFlags=0


_raw:
01/09/2026 15:52:27.441
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=EVILCOMP
	distinguishedName=CN=EVILCOMP,CN=Computers,DC=allports,DC=local
	cn=EVILCOMP
Object Details:
	sAMAccountType=805306369
	sAMAccountName=EVILCOMP$
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-570734437-619670838-1664788539-3960
	primaryGroupID=515
	pwdLastSet=0
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4096
	objectGUID=82721659-4443-49e7-a9b9-38b66e5fa6a3
	whenChanged=03:52.27 PM, Fri 01/09/2026
	whenCreated=03:52.27 PM, Fri 01/09/2026
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=32798
	uSNCreated=32794
	instanceType=4
Additional Details:
	mS-DS-CreatorSID=\x01\x05
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	localPolicyFlags=0


_raw:
01/09/2026 15:52:27.441
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=EVILCOMP
	distinguishedName=CN=EVILCOMP,CN=Computers,DC=allports,DC=local
	cn=EVILCOMP
Object Details:
	sAMAccountType=805306369
	sAMAccountName=EVILCOMP$
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-570734437-619670838-1664788539-3960
	primaryGroupID=515
	pwdLastSet=0
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4128
	objectGUID=82721659-4443-49e7-a9b9-38b66e5fa6a3
	whenChanged=03:52.27 PM, Fri 01/09/2026
	whenCreated=03:52.27 PM, Fri 01/09/2026
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=32797
	uSNCreated=32794
	instanceType=4
Additional Details:
	mS-DS-CreatorSID=\x01\x05
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	localPolicyFlags=0


_raw:
01/09/2026 15:52:27.420
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=EVILCOMP
	distinguishedName=CN=EVILCOMP,CN=Computers,DC=allports,DC=local
	cn=EVILCOMP
Object Details:
	sAMAccountType=805306369
	sAMAccountName=EVILCOMP$
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-570734437-619670838-1664788539-3960
	primaryGroupID=515
	pwdLastSet=0
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4096
	objectGUID=82721659-4443-49e7-a9b9-38b66e5fa6a3
	whenChanged=03:52.27 PM, Fri 01/09/2026
	whenCreated=03:52.27 PM, Fri 01/09/2026
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=32798
	uSNCreated=32794
	instanceType=4
Additional Details:
	mS-DS-CreatorSID=\x01\x05
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	localPolicyFlags=0


_raw:
01/09/2026 15:52:27.418
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=EVILCOMP
	distinguishedName=CN=EVILCOMP,CN=Computers,DC=allports,DC=local
	cn=EVILCOMP
Object Details:
	sAMAccountType=805306369
	sAMAccountName=EVILCOMP$
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-570734437-619670838-1664788539-3960
	primaryGroupID=515
	pwdLastSet=0
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4096
	objectGUID=82721659-4443-49e7-a9b9-38b66e5fa6a3
	whenChanged=03:52.27 PM, Fri 01/09/2026
	whenCreated=03:52.27 PM, Fri 01/09/2026
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=32798
	uSNCreated=32794
	instanceType=4
Additional Details:
	mS-DS-CreatorSID=\x01\x05
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	localPolicyFlags=0


_raw:
01/09/2026 15:52:27.405
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=EVILCOMP
	distinguishedName=CN=EVILCOMP,CN=Computers,DC=allports,DC=local
	cn=EVILCOMP
Object Details:
	sAMAccountType=805306369
	sAMAccountName=EVILCOMP$
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-570734437-619670838-1664788539-3960
	primaryGroupID=515
	pwdLastSet=0
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4128
	objectGUID=82721659-4443-49e7-a9b9-38b66e5fa6a3
	whenChanged=03:52.27 PM, Fri 01/09/2026
	whenCreated=03:52.27 PM, Fri 01/09/2026
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=32797
	uSNCreated=32794
	instanceType=4
Additional Details:
	mS-DS-CreatorSID=\x01\x05
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	localPolicyFlags=0


_raw:
01/09/2026 15:52:27.402
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=EVILCOMP
	distinguishedName=CN=EVILCOMP,CN=Computers,DC=allports,DC=local
	cn=EVILCOMP
Object Details:
	sAMAccountType=805306369
	sAMAccountName=EVILCOMP$
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-570734437-619670838-1664788539-3960
	primaryGroupID=515
	pwdLastSet=0
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4128
	objectGUID=82721659-4443-49e7-a9b9-38b66e5fa6a3
	whenChanged=03:52.27 PM, Fri 01/09/2026
	whenCreated=03:52.27 PM, Fri 01/09/2026
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=32797
	uSNCreated=32794
	instanceType=4
Additional Details:
	mS-DS-CreatorSID=\x01\x05
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	localPolicyFlags=0


_raw:
01/09/2026 15:52:27.395
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=EVILCOMP
	distinguishedName=CN=EVILCOMP,CN=Computers,DC=allports,DC=local
	cn=EVILCOMP
Object Details:
	sAMAccountType=805306369
	sAMAccountName=EVILCOMP$
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-570734437-619670838-1664788539-3960
	primaryGroupID=515
	pwdLastSet=0
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4128
	objectGUID=82721659-4443-49e7-a9b9-38b66e5fa6a3
	whenChanged=03:52.27 PM, Fri 01/09/2026
	whenCreated=03:52.27 PM, Fri 01/09/2026
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=32795
	uSNCreated=32794
	instanceType=4
Additional Details:
	mS-DS-CreatorSID=\x01\x05
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	localPolicyFlags=0


_raw:
01/09/2026 15:52:27.389
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=EVILCOMP
	distinguishedName=CN=EVILCOMP,CN=Computers,DC=allports,DC=local
	cn=EVILCOMP
Object Details:
	sAMAccountType=805306369
	sAMAccountName=EVILCOMP$
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-570734437-619670838-1664788539-3960
	primaryGroupID=515
	pwdLastSet=0
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4128
	objectGUID=82721659-4443-49e7-a9b9-38b66e5fa6a3
	whenChanged=03:52.27 PM, Fri 01/09/2026
	whenCreated=03:52.27 PM, Fri 01/09/2026
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=32795
	uSNCreated=32794
	instanceType=4
Additional Details:
	mS-DS-CreatorSID=\x01\x05
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	localPolicyFlags=0


_raw:
01/09/2026 15:52:27.386
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=EVILCOMP
	distinguishedName=CN=EVILCOMP,CN=Computers,DC=allports,DC=local
	cn=EVILCOMP
Object Details:
	sAMAccountType=805306369
	sAMAccountName=EVILCOMP$
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-570734437-619670838-1664788539-3960
	primaryGroupID=515
	pwdLastSet=0
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4128
	objectGUID=82721659-4443-49e7-a9b9-38b66e5fa6a3
	whenChanged=03:52.27 PM, Fri 01/09/2026
	whenCreated=03:52.27 PM, Fri 01/09/2026
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=32795
	uSNCreated=32794
	instanceType=4
Additional Details:
	mS-DS-CreatorSID=\x01\x05
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	localPolicyFlags=0


_raw:
01/09/2026 15:41:00.964
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Administrator
	distinguishedName=CN=Administrator,CN=Users,DC=allports,DC=local
	cn=Administrator
Object Details:
	sAMAccountType=805306368
	sAMAccountName=Administrator
	logonCount=5
	accountExpires=0
	objectSid=S-1-5-21-1355380044-2791429700-3316403701-500
	primaryGroupID=513
	pwdLastSet=05:32.00 PM, Wed 01/07/2026
	lastLogon=06:02.40 PM, Wed 01/07/2026
	lastLogoff=0
	badPasswordTime=03:41.00 PM, Fri 01/09/2026
	countryCode=0
	codePage=0
	badPwdCount=12
	userAccountControl=66048
	objectGUID=a39b079e-3f69-4f54-a206-526d1ed9b2a6
	whenChanged=03:41.00 PM, Fri 01/09/2026
	whenCreated=05:38.38 PM, Wed 01/07/2026
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=34820
	uSNCreated=8196
	instanceType=4
Additional Details:
	lastLogonTimestamp=05:59.48 PM, Wed 01/07/2026
	dSCorePropagationData=20260107225447.0Z|20260107225447.0Z|20260107223938.0Z|16010101181216.0Z
	isCriticalSystemObject=TRUE
	lockoutTime=03:41.00 PM, Fri 01/09/2026
	adminCount=1
	logonHours=<binary>
	memberOf=CN=Policy Administrators,CN=Users,DC=allports,DC=local|CN=Group Policy Creator Owners,CN=Users,DC=allports,DC=local|CN=Domain Admins,CN=Users,DC=allports,DC=local|CN=Enterprise Admins,CN=Users,DC=allports,DC=local|CN=Schema Admins,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	description=Built-in account for administering the computer/domain


_raw:
01/09/2026 15:41:00.955
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Administrator
	distinguishedName=CN=Administrator,CN=Users,DC=allports,DC=local
	cn=Administrator
Object Details:
	sAMAccountType=805306368
	sAMAccountName=Administrator
	logonCount=5
	accountExpires=0
	objectSid=S-1-5-21-1355380044-2791429700-3316403701-500
	primaryGroupID=513
	pwdLastSet=05:32.00 PM, Wed 01/07/2026
	lastLogon=06:02.40 PM, Wed 01/07/2026
	lastLogoff=0
	badPasswordTime=03:41.00 PM, Fri 01/09/2026
	countryCode=0
	codePage=0
	badPwdCount=12
	userAccountControl=66048
	objectGUID=a39b079e-3f69-4f54-a206-526d1ed9b2a6
	whenChanged=03:41.00 PM, Fri 01/09/2026
	whenCreated=05:38.38 PM, Wed 01/07/2026
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=34820
	uSNCreated=8196
	instanceType=4
Additional Details:
	lastLogonTimestamp=05:59.48 PM, Wed 01/07/2026
	dSCorePropagationData=20260107225447.0Z|20260107225447.0Z|20260107223938.0Z|16010101181216.0Z
	isCriticalSystemObject=TRUE
	lockoutTime=03:41.00 PM, Fri 01/09/2026
	adminCount=1
	logonHours=<binary>
	memberOf=CN=Policy Administrators,CN=Users,DC=allports,DC=local|CN=Group Policy Creator Owners,CN=Users,DC=allports,DC=local|CN=Domain Admins,CN=Users,DC=allports,DC=local|CN=Enterprise Admins,CN=Users,DC=allports,DC=local|CN=Schema Admins,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	description=Built-in account for administering the computer/domain


_raw:
01/09/2026 15:41:00.951
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Administrator
	distinguishedName=CN=Administrator,CN=Users,DC=allports,DC=local
	cn=Administrator
Object Details:
	sAMAccountType=805306368
	sAMAccountName=Administrator
	logonCount=5
	accountExpires=0
	objectSid=S-1-5-21-1355380044-2791429700-3316403701-500
	primaryGroupID=513
	pwdLastSet=05:32.00 PM, Wed 01/07/2026
	lastLogon=06:02.40 PM, Wed 01/07/2026
	lastLogoff=0
	badPasswordTime=03:41.00 PM, Fri 01/09/2026
	countryCode=0
	codePage=0
	badPwdCount=12
	userAccountControl=66048
	objectGUID=a39b079e-3f69-4f54-a206-526d1ed9b2a6
	whenChanged=03:41.00 PM, Fri 01/09/2026
	whenCreated=05:38.38 PM, Wed 01/07/2026
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=34820
	uSNCreated=8196
	instanceType=4
Additional Details:
	lastLogonTimestamp=05:59.48 PM, Wed 01/07/2026
	dSCorePropagationData=20260107225447.0Z|20260107225447.0Z|20260107223938.0Z|16010101181216.0Z
	isCriticalSystemObject=TRUE
	lockoutTime=03:41.00 PM, Fri 01/09/2026
	adminCount=1
	logonHours=<binary>
	memberOf=CN=Policy Administrators,CN=Users,DC=allports,DC=local|CN=Group Policy Creator Owners,CN=Users,DC=allports,DC=local|CN=Domain Admins,CN=Users,DC=allports,DC=local|CN=Enterprise Admins,CN=Users,DC=allports,DC=local|CN=Schema Admins,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	description=Built-in account for administering the computer/domain


_raw:
01/09/2026 15:41:00.917
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Administrator
	distinguishedName=CN=Administrator,CN=Users,DC=allports,DC=local
	cn=Administrator
Object Details:
	sAMAccountType=805306368
	sAMAccountName=Administrator
	logonCount=5
	accountExpires=0
	objectSid=S-1-5-21-1355380044-2791429700-3316403701-500
	primaryGroupID=513
	pwdLastSet=05:32.00 PM, Wed 01/07/2026
	lastLogon=06:02.40 PM, Wed 01/07/2026
	lastLogoff=0
	badPasswordTime=03:41.00 PM, Fri 01/09/2026
	countryCode=0
	codePage=0
	badPwdCount=11
	userAccountControl=66048
	objectGUID=a39b079e-3f69-4f54-a206-526d1ed9b2a6
	whenChanged=03:41.00 PM, Fri 01/09/2026
	whenCreated=05:38.38 PM, Wed 01/07/2026
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=34818
	uSNCreated=8196
	instanceType=4
Additional Details:
	lastLogonTimestamp=05:59.48 PM, Wed 01/07/2026
	dSCorePropagationData=20260107225447.0Z|20260107225447.0Z|20260107223938.0Z|16010101181216.0Z
	isCriticalSystemObject=TRUE
	lockoutTime=03:41.00 PM, Fri 01/09/2026
	adminCount=1
	logonHours=<binary>
	memberOf=CN=Policy Administrators,CN=Users,DC=allports,DC=local|CN=Group Policy Creator Owners,CN=Users,DC=allports,DC=local|CN=Domain Admins,CN=Users,DC=allports,DC=local|CN=Enterprise Admins,CN=Users,DC=allports,DC=local|CN=Schema Admins,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	description=Built-in account for administering the computer/domain


_raw:
01/09/2026 15:41:00.908
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Administrator
	distinguishedName=CN=Administrator,CN=Users,DC=allports,DC=local
	cn=Administrator
Object Details:
	sAMAccountType=805306368
	sAMAccountName=Administrator
	logonCount=5
	accountExpires=0
	objectSid=S-1-5-21-1355380044-2791429700-3316403701-500
	primaryGroupID=513
	pwdLastSet=05:32.00 PM, Wed 01/07/2026
	lastLogon=06:02.40 PM, Wed 01/07/2026
	lastLogoff=0
	badPasswordTime=03:41.00 PM, Fri 01/09/2026
	countryCode=0
	codePage=0
	badPwdCount=11
	userAccountControl=66048
	objectGUID=a39b079e-3f69-4f54-a206-526d1ed9b2a6
	whenChanged=03:41.00 PM, Fri 01/09/2026
	whenCreated=05:38.38 PM, Wed 01/07/2026
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=34818
	uSNCreated=8196
	instanceType=4
Additional Details:
	lastLogonTimestamp=05:59.48 PM, Wed 01/07/2026
	dSCorePropagationData=20260107225447.0Z|20260107225447.0Z|20260107223938.0Z|16010101181216.0Z
	isCriticalSystemObject=TRUE
	lockoutTime=03:41.00 PM, Fri 01/09/2026
	adminCount=1
	logonHours=<binary>
	memberOf=CN=Policy Administrators,CN=Users,DC=allports,DC=local|CN=Group Policy Creator Owners,CN=Users,DC=allports,DC=local|CN=Domain Admins,CN=Users,DC=allports,DC=local|CN=Enterprise Admins,CN=Users,DC=allports,DC=local|CN=Schema Admins,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	description=Built-in account for administering the computer/domain


_raw:
01/09/2026 15:41:00.904
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Administrator
	distinguishedName=CN=Administrator,CN=Users,DC=allports,DC=local
	cn=Administrator
Object Details:
	sAMAccountType=805306368
	sAMAccountName=Administrator
	logonCount=5
	accountExpires=0
	objectSid=S-1-5-21-1355380044-2791429700-3316403701-500
	primaryGroupID=513
	pwdLastSet=05:32.00 PM, Wed 01/07/2026
	lastLogon=06:02.40 PM, Wed 01/07/2026
	lastLogoff=0
	badPasswordTime=03:41.00 PM, Fri 01/09/2026
	countryCode=0
	codePage=0
	badPwdCount=11
	userAccountControl=66048
	objectGUID=a39b079e-3f69-4f54-a206-526d1ed9b2a6
	whenChanged=03:41.00 PM, Fri 01/09/2026
	whenCreated=05:38.38 PM, Wed 01/07/2026
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=34818
	uSNCreated=8196
	instanceType=4
Additional Details:
	lastLogonTimestamp=05:59.48 PM, Wed 01/07/2026
	dSCorePropagationData=20260107225447.0Z|20260107225447.0Z|20260107223938.0Z|16010101181216.0Z
	isCriticalSystemObject=TRUE
	lockoutTime=03:41.00 PM, Fri 01/09/2026
	adminCount=1
	logonHours=<binary>
	memberOf=CN=Policy Administrators,CN=Users,DC=allports,DC=local|CN=Group Policy Creator Owners,CN=Users,DC=allports,DC=local|CN=Domain Admins,CN=Users,DC=allports,DC=local|CN=Enterprise Admins,CN=Users,DC=allports,DC=local|CN=Schema Admins,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	description=Built-in account for administering the computer/domain


_raw:
01/09/2026 15:41:00.877
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Administrator
	distinguishedName=CN=Administrator,CN=Users,DC=allports,DC=local
	cn=Administrator
Object Details:
	sAMAccountType=805306368
	sAMAccountName=Administrator
	logonCount=5
	accountExpires=0
	objectSid=S-1-5-21-1355380044-2791429700-3316403701-500
	primaryGroupID=513
	pwdLastSet=05:32.00 PM, Wed 01/07/2026
	lastLogon=06:02.40 PM, Wed 01/07/2026
	lastLogoff=0
	badPasswordTime=03:41.00 PM, Fri 01/09/2026
	countryCode=0
	codePage=0
	badPwdCount=10
	userAccountControl=66048
	objectGUID=a39b079e-3f69-4f54-a206-526d1ed9b2a6
	whenChanged=03:41.00 PM, Fri 01/09/2026
	whenCreated=05:38.38 PM, Wed 01/07/2026
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=34816
	uSNCreated=8196
	instanceType=4
Additional Details:
	lastLogonTimestamp=05:59.48 PM, Wed 01/07/2026
	dSCorePropagationData=20260107225447.0Z|20260107225447.0Z|20260107223938.0Z|16010101181216.0Z
	isCriticalSystemObject=TRUE
	lockoutTime=03:41.00 PM, Fri 01/09/2026
	adminCount=1
	logonHours=<binary>
	memberOf=CN=Policy Administrators,CN=Users,DC=allports,DC=local|CN=Group Policy Creator Owners,CN=Users,DC=allports,DC=local|CN=Domain Admins,CN=Users,DC=allports,DC=local|CN=Enterprise Admins,CN=Users,DC=allports,DC=local|CN=Schema Admins,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	description=Built-in account for administering the computer/domain


_raw:
01/09/2026 15:41:00.871
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Administrator
	distinguishedName=CN=Administrator,CN=Users,DC=allports,DC=local
	cn=Administrator
Object Details:
	sAMAccountType=805306368
	sAMAccountName=Administrator
	logonCount=5
	accountExpires=0
	objectSid=S-1-5-21-1355380044-2791429700-3316403701-500
	primaryGroupID=513
	pwdLastSet=05:32.00 PM, Wed 01/07/2026
	lastLogon=06:02.40 PM, Wed 01/07/2026
	lastLogoff=0
	badPasswordTime=03:41.00 PM, Fri 01/09/2026
	countryCode=0
	codePage=0
	badPwdCount=10
	userAccountControl=66048
	objectGUID=a39b079e-3f69-4f54-a206-526d1ed9b2a6
	whenChanged=03:41.00 PM, Fri 01/09/2026
	whenCreated=05:38.38 PM, Wed 01/07/2026
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=34816
	uSNCreated=8196
	instanceType=4
Additional Details:
	lastLogonTimestamp=05:59.48 PM, Wed 01/07/2026
	dSCorePropagationData=20260107225447.0Z|20260107225447.0Z|20260107223938.0Z|16010101181216.0Z
	isCriticalSystemObject=TRUE
	lockoutTime=03:41.00 PM, Fri 01/09/2026
	adminCount=1
	logonHours=<binary>
	memberOf=CN=Policy Administrators,CN=Users,DC=allports,DC=local|CN=Group Policy Creator Owners,CN=Users,DC=allports,DC=local|CN=Domain Admins,CN=Users,DC=allports,DC=local|CN=Enterprise Admins,CN=Users,DC=allports,DC=local|CN=Schema Admins,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	description=Built-in account for administering the computer/domain


_raw:
01/09/2026 15:41:00.857
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Administrator
	distinguishedName=CN=Administrator,CN=Users,DC=allports,DC=local
	cn=Administrator
Object Details:
	sAMAccountType=805306368
	sAMAccountName=Administrator
	logonCount=5
	accountExpires=0
	objectSid=S-1-5-21-1355380044-2791429700-3316403701-500
	primaryGroupID=513
	pwdLastSet=05:32.00 PM, Wed 01/07/2026
	lastLogon=06:02.40 PM, Wed 01/07/2026
	lastLogoff=0
	badPasswordTime=03:41.00 PM, Fri 01/09/2026
	countryCode=0
	codePage=0
	badPwdCount=10
	userAccountControl=66048
	objectGUID=a39b079e-3f69-4f54-a206-526d1ed9b2a6
	whenChanged=03:41.00 PM, Fri 01/09/2026
	whenCreated=05:38.38 PM, Wed 01/07/2026
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=34816
	uSNCreated=8196
	instanceType=4
Additional Details:
	lastLogonTimestamp=05:59.48 PM, Wed 01/07/2026
	dSCorePropagationData=20260107225447.0Z|20260107225447.0Z|20260107223938.0Z|16010101181216.0Z
	isCriticalSystemObject=TRUE
	lockoutTime=03:41.00 PM, Fri 01/09/2026
	adminCount=1
	logonHours=<binary>
	memberOf=CN=Policy Administrators,CN=Users,DC=allports,DC=local|CN=Group Policy Creator Owners,CN=Users,DC=allports,DC=local|CN=Domain Admins,CN=Users,DC=allports,DC=local|CN=Enterprise Admins,CN=Users,DC=allports,DC=local|CN=Schema Admins,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	description=Built-in account for administering the computer/domain


_raw:
01/09/2026 15:39:31.420
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Administrator
	distinguishedName=CN=Administrator,CN=Users,DC=allports,DC=local
	cn=Administrator
Object Details:
	sAMAccountType=805306368
	sAMAccountName=Administrator
	logonCount=5
	accountExpires=0
	objectSid=S-1-5-21-1355380044-2791429700-3316403701-500
	primaryGroupID=513
	pwdLastSet=05:32.00 PM, Wed 01/07/2026
	lastLogon=06:02.40 PM, Wed 01/07/2026
	lastLogoff=0
	badPasswordTime=03:39.31 PM, Fri 01/09/2026
	countryCode=0
	codePage=0
	badPwdCount=12
	userAccountControl=66048
	objectGUID=a39b079e-3f69-4f54-a206-526d1ed9b2a6
	whenChanged=03:39.31 PM, Fri 01/09/2026
	whenCreated=05:38.38 PM, Wed 01/07/2026
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=34799
	uSNCreated=8196
	instanceType=4
Additional Details:
	lastLogonTimestamp=05:59.48 PM, Wed 01/07/2026
	dSCorePropagationData=20260107225447.0Z|20260107225447.0Z|20260107223938.0Z|16010101181216.0Z
	isCriticalSystemObject=TRUE
	lockoutTime=03:39.31 PM, Fri 01/09/2026
	adminCount=1
	logonHours=<binary>
	memberOf=CN=Policy Administrators,CN=Users,DC=allports,DC=local|CN=Group Policy Creator Owners,CN=Users,DC=allports,DC=local|CN=Domain Admins,CN=Users,DC=allports,DC=local|CN=Enterprise Admins,CN=Users,DC=allports,DC=local|CN=Schema Admins,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	description=Built-in account for administering the computer/domain


_raw:
01/09/2026 15:39:31.397
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Administrator
	distinguishedName=CN=Administrator,CN=Users,DC=allports,DC=local
	cn=Administrator
Object Details:
	sAMAccountType=805306368
	sAMAccountName=Administrator
	logonCount=5
	accountExpires=0
	objectSid=S-1-5-21-1355380044-2791429700-3316403701-500
	primaryGroupID=513
	pwdLastSet=05:32.00 PM, Wed 01/07/2026
	lastLogon=06:02.40 PM, Wed 01/07/2026
	lastLogoff=0
	badPasswordTime=03:39.31 PM, Fri 01/09/2026
	countryCode=0
	codePage=0
	badPwdCount=12
	userAccountControl=66048
	objectGUID=a39b079e-3f69-4f54-a206-526d1ed9b2a6
	whenChanged=03:39.31 PM, Fri 01/09/2026
	whenCreated=05:38.38 PM, Wed 01/07/2026
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=34799
	uSNCreated=8196
	instanceType=4
Additional Details:
	lastLogonTimestamp=05:59.48 PM, Wed 01/07/2026
	dSCorePropagationData=20260107225447.0Z|20260107225447.0Z|20260107223938.0Z|16010101181216.0Z
	isCriticalSystemObject=TRUE
	lockoutTime=03:39.31 PM, Fri 01/09/2026
	adminCount=1
	logonHours=<binary>
	memberOf=CN=Policy Administrators,CN=Users,DC=allports,DC=local|CN=Group Policy Creator Owners,CN=Users,DC=allports,DC=local|CN=Domain Admins,CN=Users,DC=allports,DC=local|CN=Enterprise Admins,CN=Users,DC=allports,DC=local|CN=Schema Admins,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	description=Built-in account for administering the computer/domain


_raw:
01/09/2026 15:39:31.395
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Administrator
	distinguishedName=CN=Administrator,CN=Users,DC=allports,DC=local
	cn=Administrator
Object Details:
	sAMAccountType=805306368
	sAMAccountName=Administrator
	logonCount=5
	accountExpires=0
	objectSid=S-1-5-21-1355380044-2791429700-3316403701-500
	primaryGroupID=513
	pwdLastSet=05:32.00 PM, Wed 01/07/2026
	lastLogon=06:02.40 PM, Wed 01/07/2026
	lastLogoff=0
	badPasswordTime=03:39.31 PM, Fri 01/09/2026
	countryCode=0
	codePage=0
	badPwdCount=12
	userAccountControl=66048
	objectGUID=a39b079e-3f69-4f54-a206-526d1ed9b2a6
	whenChanged=03:39.31 PM, Fri 01/09/2026
	whenCreated=05:38.38 PM, Wed 01/07/2026
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=34799
	uSNCreated=8196
	instanceType=4
Additional Details:
	lastLogonTimestamp=05:59.48 PM, Wed 01/07/2026
	dSCorePropagationData=20260107225447.0Z|20260107225447.0Z|20260107223938.0Z|16010101181216.0Z
	isCriticalSystemObject=TRUE
	lockoutTime=03:39.31 PM, Fri 01/09/2026
	adminCount=1
	logonHours=<binary>
	memberOf=CN=Policy Administrators,CN=Users,DC=allports,DC=local|CN=Group Policy Creator Owners,CN=Users,DC=allports,DC=local|CN=Domain Admins,CN=Users,DC=allports,DC=local|CN=Enterprise Admins,CN=Users,DC=allports,DC=local|CN=Schema Admins,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	description=Built-in account for administering the computer/domain


_raw:
01/09/2026 15:39:31.373
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Administrator
	distinguishedName=CN=Administrator,CN=Users,DC=allports,DC=local
	cn=Administrator
Object Details:
	sAMAccountType=805306368
	sAMAccountName=Administrator
	logonCount=5
	accountExpires=0
	objectSid=S-1-5-21-1355380044-2791429700-3316403701-500
	primaryGroupID=513
	pwdLastSet=05:32.00 PM, Wed 01/07/2026
	lastLogon=06:02.40 PM, Wed 01/07/2026
	lastLogoff=0
	badPasswordTime=03:39.31 PM, Fri 01/09/2026
	countryCode=0
	codePage=0
	badPwdCount=11
	userAccountControl=66048
	objectGUID=a39b079e-3f69-4f54-a206-526d1ed9b2a6
	whenChanged=03:39.31 PM, Fri 01/09/2026
	whenCreated=05:38.38 PM, Wed 01/07/2026
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=34797
	uSNCreated=8196
	instanceType=4
Additional Details:
	lastLogonTimestamp=05:59.48 PM, Wed 01/07/2026
	dSCorePropagationData=20260107225447.0Z|20260107225447.0Z|20260107223938.0Z|16010101181216.0Z
	isCriticalSystemObject=TRUE
	lockoutTime=03:39.31 PM, Fri 01/09/2026
	adminCount=1
	logonHours=<binary>
	memberOf=CN=Policy Administrators,CN=Users,DC=allports,DC=local|CN=Group Policy Creator Owners,CN=Users,DC=allports,DC=local|CN=Domain Admins,CN=Users,DC=allports,DC=local|CN=Enterprise Admins,CN=Users,DC=allports,DC=local|CN=Schema Admins,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	description=Built-in account for administering the computer/domain


_raw:
01/09/2026 15:39:31.366
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Administrator
	distinguishedName=CN=Administrator,CN=Users,DC=allports,DC=local
	cn=Administrator
Object Details:
	sAMAccountType=805306368
	sAMAccountName=Administrator
	logonCount=5
	accountExpires=0
	objectSid=S-1-5-21-1355380044-2791429700-3316403701-500
	primaryGroupID=513
	pwdLastSet=05:32.00 PM, Wed 01/07/2026
	lastLogon=06:02.40 PM, Wed 01/07/2026
	lastLogoff=0
	badPasswordTime=03:39.31 PM, Fri 01/09/2026
	countryCode=0
	codePage=0
	badPwdCount=11
	userAccountControl=66048
	objectGUID=a39b079e-3f69-4f54-a206-526d1ed9b2a6
	whenChanged=03:39.31 PM, Fri 01/09/2026
	whenCreated=05:38.38 PM, Wed 01/07/2026
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=34797
	uSNCreated=8196
	instanceType=4
Additional Details:
	lastLogonTimestamp=05:59.48 PM, Wed 01/07/2026
	dSCorePropagationData=20260107225447.0Z|20260107225447.0Z|20260107223938.0Z|16010101181216.0Z
	isCriticalSystemObject=TRUE
	lockoutTime=03:39.31 PM, Fri 01/09/2026
	adminCount=1
	logonHours=<binary>
	memberOf=CN=Policy Administrators,CN=Users,DC=allports,DC=local|CN=Group Policy Creator Owners,CN=Users,DC=allports,DC=local|CN=Domain Admins,CN=Users,DC=allports,DC=local|CN=Enterprise Admins,CN=Users,DC=allports,DC=local|CN=Schema Admins,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	description=Built-in account for administering the computer/domain


_raw:
01/09/2026 15:39:31.364
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Administrator
	distinguishedName=CN=Administrator,CN=Users,DC=allports,DC=local
	cn=Administrator
Object Details:
	sAMAccountType=805306368
	sAMAccountName=Administrator
	logonCount=5
	accountExpires=0
	objectSid=S-1-5-21-1355380044-2791429700-3316403701-500
	primaryGroupID=513
	pwdLastSet=05:32.00 PM, Wed 01/07/2026
	lastLogon=06:02.40 PM, Wed 01/07/2026
	lastLogoff=0
	badPasswordTime=03:39.31 PM, Fri 01/09/2026
	countryCode=0
	codePage=0
	badPwdCount=11
	userAccountControl=66048
	objectGUID=a39b079e-3f69-4f54-a206-526d1ed9b2a6
	whenChanged=03:39.31 PM, Fri 01/09/2026
	whenCreated=05:38.38 PM, Wed 01/07/2026
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=34797
	uSNCreated=8196
	instanceType=4
Additional Details:
	lastLogonTimestamp=05:59.48 PM, Wed 01/07/2026
	dSCorePropagationData=20260107225447.0Z|20260107225447.0Z|20260107223938.0Z|16010101181216.0Z
	isCriticalSystemObject=TRUE
	lockoutTime=03:39.31 PM, Fri 01/09/2026
	adminCount=1
	logonHours=<binary>
	memberOf=CN=Policy Administrators,CN=Users,DC=allports,DC=local|CN=Group Policy Creator Owners,CN=Users,DC=allports,DC=local|CN=Domain Admins,CN=Users,DC=allports,DC=local|CN=Enterprise Admins,CN=Users,DC=allports,DC=local|CN=Schema Admins,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	description=Built-in account for administering the computer/domain


_raw:
01/09/2026 15:39:31.311
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Administrator
	distinguishedName=CN=Administrator,CN=Users,DC=allports,DC=local
	cn=Administrator
Object Details:
	sAMAccountType=805306368
	sAMAccountName=Administrator
	logonCount=5
	accountExpires=0
	objectSid=S-1-5-21-1355380044-2791429700-3316403701-500
	primaryGroupID=513
	pwdLastSet=05:32.00 PM, Wed 01/07/2026
	lastLogon=06:02.40 PM, Wed 01/07/2026
	lastLogoff=0
	badPasswordTime=03:39.31 PM, Fri 01/09/2026
	countryCode=0
	codePage=0
	badPwdCount=10
	userAccountControl=66048
	objectGUID=a39b079e-3f69-4f54-a206-526d1ed9b2a6
	whenChanged=03:39.31 PM, Fri 01/09/2026
	whenCreated=05:38.38 PM, Wed 01/07/2026
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=34795
	uSNCreated=8196
	instanceType=4
Additional Details:
	lastLogonTimestamp=05:59.48 PM, Wed 01/07/2026
	dSCorePropagationData=20260107225447.0Z|20260107225447.0Z|20260107223938.0Z|16010101181216.0Z
	isCriticalSystemObject=TRUE
	lockoutTime=03:39.31 PM, Fri 01/09/2026
	adminCount=1
	logonHours=<binary>
	memberOf=CN=Policy Administrators,CN=Users,DC=allports,DC=local|CN=Group Policy Creator Owners,CN=Users,DC=allports,DC=local|CN=Domain Admins,CN=Users,DC=allports,DC=local|CN=Enterprise Admins,CN=Users,DC=allports,DC=local|CN=Schema Admins,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	description=Built-in account for administering the computer/domain


_raw:
01/09/2026 15:39:31.288
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Administrator
	distinguishedName=CN=Administrator,CN=Users,DC=allports,DC=local
	cn=Administrator
Object Details:
	sAMAccountType=805306368
	sAMAccountName=Administrator
	logonCount=5
	accountExpires=0
	objectSid=S-1-5-21-1355380044-2791429700-3316403701-500
	primaryGroupID=513
	pwdLastSet=05:32.00 PM, Wed 01/07/2026
	lastLogon=06:02.40 PM, Wed 01/07/2026
	lastLogoff=0
	badPasswordTime=03:39.31 PM, Fri 01/09/2026
	countryCode=0
	codePage=0
	badPwdCount=10
	userAccountControl=66048
	objectGUID=a39b079e-3f69-4f54-a206-526d1ed9b2a6
	whenChanged=03:39.31 PM, Fri 01/09/2026
	whenCreated=05:38.38 PM, Wed 01/07/2026
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=34795
	uSNCreated=8196
	instanceType=4
Additional Details:
	lastLogonTimestamp=05:59.48 PM, Wed 01/07/2026
	dSCorePropagationData=20260107225447.0Z|20260107225447.0Z|20260107223938.0Z|16010101181216.0Z
	isCriticalSystemObject=TRUE
	lockoutTime=03:39.31 PM, Fri 01/09/2026
	adminCount=1
	logonHours=<binary>
	memberOf=CN=Policy Administrators,CN=Users,DC=allports,DC=local|CN=Group Policy Creator Owners,CN=Users,DC=allports,DC=local|CN=Domain Admins,CN=Users,DC=allports,DC=local|CN=Enterprise Admins,CN=Users,DC=allports,DC=local|CN=Schema Admins,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	description=Built-in account for administering the computer/domain


_raw:
01/09/2026 15:39:31.285
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Administrator
	distinguishedName=CN=Administrator,CN=Users,DC=allports,DC=local
	cn=Administrator
Object Details:
	sAMAccountType=805306368
	sAMAccountName=Administrator
	logonCount=5
	accountExpires=0
	objectSid=S-1-5-21-1355380044-2791429700-3316403701-500
	primaryGroupID=513
	pwdLastSet=05:32.00 PM, Wed 01/07/2026
	lastLogon=06:02.40 PM, Wed 01/07/2026
	lastLogoff=0
	badPasswordTime=03:39.31 PM, Fri 01/09/2026
	countryCode=0
	codePage=0
	badPwdCount=10
	userAccountControl=66048
	objectGUID=a39b079e-3f69-4f54-a206-526d1ed9b2a6
	whenChanged=03:39.31 PM, Fri 01/09/2026
	whenCreated=05:38.38 PM, Wed 01/07/2026
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=34795
	uSNCreated=8196
	instanceType=4
Additional Details:
	lastLogonTimestamp=05:59.48 PM, Wed 01/07/2026
	dSCorePropagationData=20260107225447.0Z|20260107225447.0Z|20260107223938.0Z|16010101181216.0Z
	isCriticalSystemObject=TRUE
	lockoutTime=03:39.31 PM, Fri 01/09/2026
	adminCount=1
	logonHours=<binary>
	memberOf=CN=Policy Administrators,CN=Users,DC=allports,DC=local|CN=Group Policy Creator Owners,CN=Users,DC=allports,DC=local|CN=Domain Admins,CN=Users,DC=allports,DC=local|CN=Enterprise Admins,CN=Users,DC=allports,DC=local|CN=Schema Admins,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	description=Built-in account for administering the computer/domain


_raw:
01/09/2026 15:30:57.506
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=SVC_STABILIZE
	distinguishedName=CN=SVC_STABILIZE,CN=Users,DC=allports,DC=local
	cn=SVC_STABILIZE
Object Details:
	sAMAccountType=805306368
	sAMAccountName=SVC_STABILIZE
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-570734437-619670838-1664788539-3955
	primaryGroupID=513
	pwdLastSet=05:51.49 PM, Wed 01/07/2026
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=8920239f-fd8a-43dc-b217-bbff2cc9eec5
	whenChanged=03:30.57 PM, Fri 01/09/2026
	whenCreated=05:51.48 PM, Wed 01/07/2026
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=32788
	uSNCreated=29971
	instanceType=4
Additional Details:
	lastLogonTimestamp=03:30.57 PM, Fri 01/09/2026
	dSCorePropagationData=16010101000000.0Z
	servicePrincipalName=gyroscope/APT-DC-01
	description=Keeps the boats afloats


_raw:
01/09/2026 15:30:57.489
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=SVC_STABILIZE
	distinguishedName=CN=SVC_STABILIZE,CN=Users,DC=allports,DC=local
	cn=SVC_STABILIZE
Object Details:
	sAMAccountType=805306368
	sAMAccountName=SVC_STABILIZE
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-570734437-619670838-1664788539-3955
	primaryGroupID=513
	pwdLastSet=05:51.49 PM, Wed 01/07/2026
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=8920239f-fd8a-43dc-b217-bbff2cc9eec5
	whenChanged=03:30.57 PM, Fri 01/09/2026
	whenCreated=05:51.48 PM, Wed 01/07/2026
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=32788
	uSNCreated=29971
	instanceType=4
Additional Details:
	lastLogonTimestamp=03:30.57 PM, Fri 01/09/2026
	dSCorePropagationData=16010101000000.0Z
	servicePrincipalName=gyroscope/APT-DC-01
	description=Keeps the boats afloats


_raw:
01/09/2026 15:30:57.485
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=SVC_STABILIZE
	distinguishedName=CN=SVC_STABILIZE,CN=Users,DC=allports,DC=local
	cn=SVC_STABILIZE
Object Details:
	sAMAccountType=805306368
	sAMAccountName=SVC_STABILIZE
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-570734437-619670838-1664788539-3955
	primaryGroupID=513
	pwdLastSet=05:51.49 PM, Wed 01/07/2026
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=8920239f-fd8a-43dc-b217-bbff2cc9eec5
	whenChanged=03:30.57 PM, Fri 01/09/2026
	whenCreated=05:51.48 PM, Wed 01/07/2026
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=32788
	uSNCreated=29971
	instanceType=4
Additional Details:
	lastLogonTimestamp=03:30.57 PM, Fri 01/09/2026
	dSCorePropagationData=16010101000000.0Z
	servicePrincipalName=gyroscope/APT-DC-01
	description=Keeps the boats afloats


_raw:
01/09/2026 15:27:17.914
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=FINALS12
	distinguishedName=CN=FINALS12,CN=Computers,DC=allports,DC=local
	cn=FINALS12
Object Details:
	sAMAccountType=805306369
	sAMAccountName=FINALS12$
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-418793979-765667389-4021768109-3962
	primaryGroupID=515
	pwdLastSet=0
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4096
	objectGUID=b1f8ccef-f529-4fd2-88cb-ee300caa8c33
	whenChanged=03:27.17 PM, Fri 01/09/2026
	whenCreated=03:27.17 PM, Fri 01/09/2026
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=56684
	uSNCreated=56680
	instanceType=4
Additional Details:
	mS-DS-CreatorSID=\x01\x05
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	localPolicyFlags=0


_raw:
01/09/2026 15:27:17.914
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=FINALS12
	distinguishedName=CN=FINALS12,CN=Computers,DC=allports,DC=local
	cn=FINALS12
Object Details:
	sAMAccountType=805306369
	sAMAccountName=FINALS12$
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-418793979-765667389-4021768109-3962
	primaryGroupID=515
	pwdLastSet=0
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4128
	objectGUID=b1f8ccef-f529-4fd2-88cb-ee300caa8c33
	whenChanged=03:27.17 PM, Fri 01/09/2026
	whenCreated=03:27.17 PM, Fri 01/09/2026
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=56683
	uSNCreated=56680
	instanceType=4
Additional Details:
	mS-DS-CreatorSID=\x01\x05
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	localPolicyFlags=0


_raw:
01/09/2026 15:27:17.913
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=FINALS12
	distinguishedName=CN=FINALS12,CN=Computers,DC=allports,DC=local
	cn=FINALS12
Object Details:
	sAMAccountType=805306369
	sAMAccountName=FINALS12$
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-418793979-765667389-4021768109-3962
	primaryGroupID=515
	pwdLastSet=0
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4096
	objectGUID=b1f8ccef-f529-4fd2-88cb-ee300caa8c33
	whenChanged=03:27.17 PM, Fri 01/09/2026
	whenCreated=03:27.17 PM, Fri 01/09/2026
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=56684
	uSNCreated=56680
	instanceType=4
Additional Details:
	mS-DS-CreatorSID=\x01\x05
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	localPolicyFlags=0


_raw:
01/09/2026 15:27:17.905
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=FINALS12
	distinguishedName=CN=FINALS12,CN=Computers,DC=allports,DC=local
	cn=FINALS12
Object Details:
	sAMAccountType=805306369
	sAMAccountName=FINALS12$
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-418793979-765667389-4021768109-3962
	primaryGroupID=515
	pwdLastSet=0
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4096
	objectGUID=b1f8ccef-f529-4fd2-88cb-ee300caa8c33
	whenChanged=03:27.17 PM, Fri 01/09/2026
	whenCreated=03:27.17 PM, Fri 01/09/2026
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=56684
	uSNCreated=56680
	instanceType=4
Additional Details:
	mS-DS-CreatorSID=\x01\x05
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	localPolicyFlags=0


_raw:
01/09/2026 15:27:17.890
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=FINALS12
	distinguishedName=CN=FINALS12,CN=Computers,DC=allports,DC=local
	cn=FINALS12
Object Details:
	sAMAccountType=805306369
	sAMAccountName=FINALS12$
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-418793979-765667389-4021768109-3962
	primaryGroupID=515
	pwdLastSet=0
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4128
	objectGUID=b1f8ccef-f529-4fd2-88cb-ee300caa8c33
	whenChanged=03:27.17 PM, Fri 01/09/2026
	whenCreated=03:27.17 PM, Fri 01/09/2026
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=56683
	uSNCreated=56680
	instanceType=4
Additional Details:
	mS-DS-CreatorSID=\x01\x05
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	localPolicyFlags=0


_raw:
01/09/2026 15:27:17.882
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=FINALS12
	distinguishedName=CN=FINALS12,CN=Computers,DC=allports,DC=local
	cn=FINALS12
Object Details:
	sAMAccountType=805306369
	sAMAccountName=FINALS12$
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-418793979-765667389-4021768109-3962
	primaryGroupID=515
	pwdLastSet=0
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4128
	objectGUID=b1f8ccef-f529-4fd2-88cb-ee300caa8c33
	whenChanged=03:27.17 PM, Fri 01/09/2026
	whenCreated=03:27.17 PM, Fri 01/09/2026
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=56683
	uSNCreated=56680
	instanceType=4
Additional Details:
	mS-DS-CreatorSID=\x01\x05
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	localPolicyFlags=0


_raw:
01/09/2026 15:27:17.867
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=FINALS12
	distinguishedName=CN=FINALS12,CN=Computers,DC=allports,DC=local
	cn=FINALS12
Object Details:
	sAMAccountType=805306369
	sAMAccountName=FINALS12$
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-418793979-765667389-4021768109-3962
	primaryGroupID=515
	pwdLastSet=0
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4128
	objectGUID=b1f8ccef-f529-4fd2-88cb-ee300caa8c33
	whenChanged=03:27.17 PM, Fri 01/09/2026
	whenCreated=03:27.17 PM, Fri 01/09/2026
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=56681
	uSNCreated=56680
	instanceType=4
Additional Details:
	mS-DS-CreatorSID=\x01\x05
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	localPolicyFlags=0


_raw:
01/09/2026 15:27:17.866
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=FINALS12
	distinguishedName=CN=FINALS12,CN=Computers,DC=allports,DC=local
	cn=FINALS12
Object Details:
	sAMAccountType=805306369
	sAMAccountName=FINALS12$
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-418793979-765667389-4021768109-3962
	primaryGroupID=515
	pwdLastSet=0
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4128
	objectGUID=b1f8ccef-f529-4fd2-88cb-ee300caa8c33
	whenChanged=03:27.17 PM, Fri 01/09/2026
	whenCreated=03:27.17 PM, Fri 01/09/2026
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=56681
	uSNCreated=56680
	instanceType=4
Additional Details:
	mS-DS-CreatorSID=\x01\x05
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	localPolicyFlags=0


_raw:
01/09/2026 15:27:17.859
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=FINALS12
	distinguishedName=CN=FINALS12,CN=Computers,DC=allports,DC=local
	cn=FINALS12
Object Details:
	sAMAccountType=805306369
	sAMAccountName=FINALS12$
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-418793979-765667389-4021768109-3962
	primaryGroupID=515
	pwdLastSet=0
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4128
	objectGUID=b1f8ccef-f529-4fd2-88cb-ee300caa8c33
	whenChanged=03:27.17 PM, Fri 01/09/2026
	whenCreated=03:27.17 PM, Fri 01/09/2026
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=56681
	uSNCreated=56680
	instanceType=4
Additional Details:
	mS-DS-CreatorSID=\x01\x05
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	localPolicyFlags=0


_raw:
01/09/2026 15:02:01.183
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=pentester
	distinguishedName=CN=pentester,OU=Departments,DC=allports,DC=local
	cn=pentester
Object Details:
	sAMAccountType=805306368
	sAMAccountName=pentester
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-418793979-765667389-4021768109-3961
	primaryGroupID=513
	pwdLastSet=01:50.27 PM, Fri 01/09/2026
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=98478a8b-6120-4084-8a17-8a02d76904b6
	whenChanged=03:02.01 PM, Fri 01/09/2026
	whenCreated=01:50.27 PM, Fri 01/09/2026
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=53818
	uSNCreated=36665
	instanceType=4
Additional Details:
	lastLogonTimestamp=03:02.01 PM, Fri 01/09/2026
	dSCorePropagationData=16010101000000.0Z