_raw:
11/05/2025 09:33:33.061
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Replicator
	distinguishedName=CN=Replicator,CN=Builtin,DC=allports,DC=local
	cn=Replicator
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Replicator
	objectSid=S-1-5-32-552
	objectGUID=2b7a280d-ae70-4328-bf22-73f2cacf36e6
	whenChanged=09:33.32 AM, Wed 11/05/2025
	whenCreated=09:17.19 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30045
	uSNCreated=8217
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141821.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Supports file replication in a domain


_raw:
11/05/2025 09:33:32.951
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Kevin Miller
	distinguishedName=CN=Kevin Miller,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Kevin
	sn=Miller
	cn=Kevin Miller
Object Details:
	sAMAccountType=805306368
	sAMAccountName=kmiller
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2384545126-3094289152-2355773625-2444
	primaryGroupID=513
	pwdLastSet=09:22.11 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=ddb6aef3-3e95-461d-b511-8c4e14e70ad0
	whenChanged=09:33.32 AM, Wed 11/05/2025
	whenCreated=09:22.11 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30043
	uSNCreated=20862
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=041 Ronnie Branch, Oconnellfort, WV 97644
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer

_sourcetype: ActiveDirectory

source: ActiveDirectory

sourcetype: ActiveDirectory


_raw:
11/05/2025 09:33:32.920
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Michael Rivera
	distinguishedName=CN=Michael Rivera,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Michael
	sn=Rivera
	cn=Michael Rivera
Object Details:
	sAMAccountType=805306368
	sAMAccountName=mrivera1
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2384545126-3094289152-2355773625-3719
	primaryGroupID=513
	pwdLastSet=09:23.28 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=8a3b00ee-b5ee-40b9-b03c-cdbbd2e4934a
	whenChanged=09:33.32 AM, Wed 11/05/2025
	whenCreated=09:23.28 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30041
	uSNCreated=28537
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=11949 Gray Meadows Apt. 897, Lindseyberg, NV 06447
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 09:33:32.904
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Key Admins
	distinguishedName=CN=Key Admins,CN=Users,DC=allports,DC=local
	cn=Key Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Key Admins
	objectSid=S-1-5-21-2384545126-3094289152-2355773625-526
	objectGUID=6850ace1-adae-42f4-980d-e89c288694cb
	whenChanged=09:33.32 AM, Wed 11/05/2025
	whenCreated=09:18.21 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30039
	uSNCreated=12450
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141821.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483646
	adminCount=1
	description=Members of this group can perform administrative actions on key objects within the domain.


_raw:
11/05/2025 09:33:32.873
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Enterprise Admins
	distinguishedName=CN=Enterprise Admins,CN=Users,DC=allports,DC=local
	cn=Enterprise Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Enterprise Admins
	objectSid=S-1-5-21-2384545126-3094289152-2355773625-519
	objectGUID=14aebcdc-bdd9-4e5a-9ecd-325ab34bd8bd
	whenChanged=09:33.32 AM, Wed 11/05/2025
	whenCreated=09:18.21 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30038
	uSNCreated=12339
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141821.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483640
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	member=CN=Administrator,CN=Users,DC=allports,DC=local
	description=Designated administrators of the enterprise


_raw:
11/05/2025 09:33:32.857
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=John Taylor
	distinguishedName=CN=John Taylor,OU=Executive,OU=Departments,DC=allports,DC=local
	givenName=John
	sn=Taylor
	cn=John Taylor
Object Details:
	sAMAccountType=805306368
	sAMAccountName=jtaylor
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2384545126-3094289152-2355773625-2402
	primaryGroupID=513
	pwdLastSet=09:22.09 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=4f88d3d6-d6c2-4809-8806-3c4479155611
	whenChanged=09:33.32 AM, Wed 11/05/2025
	whenCreated=09:22.09 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30037
	uSNCreated=20604
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=80159 Rebekah Tunnel, Kevinmouth, NY 57903
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=CISO


_raw:
11/05/2025 09:33:32.857
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Enterprise Key Admins
	distinguishedName=CN=Enterprise Key Admins,CN=Users,DC=allports,DC=local
	cn=Enterprise Key Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Enterprise Key Admins
	objectSid=S-1-5-21-2384545126-3094289152-2355773625-527
	objectGUID=7f0f06ca-e3e3-46ff-b899-629198b40b02
	whenChanged=09:33.32 AM, Wed 11/05/2025
	whenCreated=09:18.21 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30035
	uSNCreated=12453
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141821.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483640
	adminCount=1
	description=Members of this group can perform administrative actions on key objects within the forest.


_raw:
11/05/2025 09:33:32.841
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=cloudbase-init
	displayName=cloudbase-init
	distinguishedName=CN=cloudbase-init,CN=Users,DC=allports,DC=local
	cn=cloudbase-init
Object Details:
	sAMAccountType=805306368
	sAMAccountName=cloudbase-init
	logonCount=5
	accountExpires=Never Expires
	objectSid=S-1-5-21-2384545126-3094289152-2355773625-1000
	primaryGroupID=513
	pwdLastSet=09:09.00 AM, Wed 11/05/2025
	lastLogon=09:19.01 AM, Wed 11/05/2025
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=66048
	objectGUID=fce00cc0-cb59-4224-9ad5-b6360efbc307
	whenChanged=09:33.32 AM, Wed 11/05/2025
	whenCreated=09:17.19 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30034
	uSNCreated=8198
	instanceType=4
Additional Details:
	lastLogonTimestamp=09:19.01 AM, Wed 11/05/2025
	dSCorePropagationData=20251105141821.0Z|16010101000001.0Z
	adminCount=1
	memberOf=CN=Administrators,CN=Builtin,DC=allports,DC=local


_raw:
11/05/2025 09:33:32.841
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Erick Smith
	distinguishedName=CN=Erick Smith,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Erick
	sn=Smith
	cn=Erick Smith
Object Details:
	sAMAccountType=805306368
	sAMAccountName=esmith
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2384545126-3094289152-2355773625-3646
	primaryGroupID=513
	pwdLastSet=09:23.23 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=00a580be-8f77-40b8-abc6-7e01127e3c23
	whenChanged=09:33.32 AM, Wed 11/05/2025
	whenCreated=09:23.23 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30032
	uSNCreated=28096
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=569 Carrie Route Apt. 586, Lake James, NV 94321
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 09:33:32.826
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Sarah Hill
	distinguishedName=CN=Sarah Hill,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Sarah
	sn=Hill
	cn=Sarah Hill
Object Details:
	sAMAccountType=805306368
	sAMAccountName=shill
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2384545126-3094289152-2355773625-3089
	primaryGroupID=513
	pwdLastSet=09:22.50 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=a43a98a3-1189-45e3-bbe0-d9f7b09c54b1
	whenChanged=09:33.32 AM, Wed 11/05/2025
	whenCreated=09:22.50 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30030
	uSNCreated=24743
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=837 Wolfe Street, Mitchellhaven, VT 83781
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 09:33:32.826
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Josie Young
	distinguishedName=CN=Josie Young,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Josie
	sn=Young
	cn=Josie Young
Object Details:
	sAMAccountType=805306368
	sAMAccountName=jyoung
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2384545126-3094289152-2355773625-1897
	primaryGroupID=513
	pwdLastSet=09:21.38 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=2deafd91-9c34-4ac9-adf8-76da2e99e2d0
	whenChanged=09:33.32 AM, Wed 11/05/2025
	whenCreated=09:21.38 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30028
	uSNCreated=17563
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=49085 Tucker Circles Suite 272, Novakborough, RI 93174
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 09:33:32.794
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Logan Clark
	distinguishedName=CN=Logan Clark,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Logan
	sn=Clark
	cn=Logan Clark
Object Details:
	sAMAccountType=805306368
	sAMAccountName=lclark1
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2384545126-3094289152-2355773625-3751
	primaryGroupID=513
	pwdLastSet=09:23.30 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=fd3e4c8d-82f1-4617-aa0b-7189830a9d1d
	whenChanged=09:33.32 AM, Wed 11/05/2025
	whenCreated=09:23.30 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30026
	uSNCreated=28732
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=29325 Rebecca Estate, Lake Ronald, CO 85102
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 09:33:32.763
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Emily Carter
	distinguishedName=CN=Emily Carter,OU=Executive,OU=Departments,DC=allports,DC=local
	givenName=Emily
	sn=Carter
	cn=Emily Carter
Object Details:
	sAMAccountType=805306368
	sAMAccountName=ecarter
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2384545126-3094289152-2355773625-1106
	primaryGroupID=513
	pwdLastSet=09:20.50 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=9422168a-1732-48f3-bb8a-4e2d630b078c
	whenChanged=09:33.32 AM, Wed 11/05/2025
	whenCreated=09:20.50 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30024
	uSNCreated=12773
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=5325 Rogers Village, Lydiaport, KY 37558
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Co-Founder & COO


_raw:
11/05/2025 09:33:32.701
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Penelope Brooks
	distinguishedName=CN=Penelope Brooks,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Penelope
	sn=Brooks
	cn=Penelope Brooks
Object Details:
	sAMAccountType=805306368
	sAMAccountName=pbrooks
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2384545126-3094289152-2355773625-2496
	primaryGroupID=513
	pwdLastSet=09:22.14 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=2d82e986-8226-47e1-a9e2-be3e5c28bfb9
	whenChanged=09:33.32 AM, Wed 11/05/2025
	whenCreated=09:22.14 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30022
	uSNCreated=21177
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=373 Dickson Pike, Darrenstad, VA 06979
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 09:33:32.670
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Olivia Collins
	distinguishedName=CN=Olivia Collins,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Olivia
	sn=Collins
	cn=Olivia Collins
Object Details:
	sAMAccountType=805306368
	sAMAccountName=ocollins
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2384545126-3094289152-2355773625-1169
	primaryGroupID=513
	pwdLastSet=09:20.54 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=1f26bc7e-3bc4-4bf2-8f02-cb18c12db8b4
	whenChanged=09:33.32 AM, Wed 11/05/2025
	whenCreated=09:20.54 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30020
	uSNCreated=13178
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=24735 Webster Locks, North Jonathanton, MD 97223
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 09:33:32.654
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Axel White
	distinguishedName=CN=Axel White,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Axel
	sn=White
	cn=Axel White
Object Details:
	sAMAccountType=805306368
	sAMAccountName=awhite1
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2384545126-3094289152-2355773625-3866
	primaryGroupID=513
	pwdLastSet=09:23.37 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=c4ec317d-ad1c-453a-aa41-1caea9cd5b25
	whenChanged=09:33.32 AM, Wed 11/05/2025
	whenCreated=09:23.37 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30018
	uSNCreated=29436
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=2130 David Mount, West Meganland, AZ 73217
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 09:33:32.638
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Ethan Fisher
	distinguishedName=CN=Ethan Fisher,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Ethan
	sn=Fisher
	cn=Ethan Fisher
Object Details:
	sAMAccountType=805306368
	sAMAccountName=efisher
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2384545126-3094289152-2355773625-1618
	primaryGroupID=513
	pwdLastSet=09:21.21 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=a7deb777-2b0c-4214-8607-e775d3e4e1f2
	whenChanged=09:33.32 AM, Wed 11/05/2025
	whenCreated=09:21.21 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30016
	uSNCreated=15884
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=79800 Bruce Vista, Hortonberg, HI 64197
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 09:33:32.607
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Bailey Finn
	distinguishedName=CN=Bailey Finn,OU=Administration,OU=Departments,DC=allports,DC=local
	givenName=Bailey
	sn=Finn
	cn=Bailey Finn
Object Details:
	sAMAccountType=805306368
	sAMAccountName=bfinn
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2384545126-3094289152-2355773625-2009
	primaryGroupID=513
	pwdLastSet=09:21.45 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=6834ee71-5ac5-4b0a-95e0-9f6d0920efda
	whenChanged=09:33.32 AM, Wed 11/05/2025
	whenCreated=09:21.45 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30014
	uSNCreated=18241
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=USNS Jackson, FPO AP 90789
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Director of Technical Services


_raw:
11/05/2025 09:33:32.591
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Schema Admins
	distinguishedName=CN=Schema Admins,CN=Users,DC=allports,DC=local
	cn=Schema Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Schema Admins
	objectSid=S-1-5-21-2384545126-3094289152-2355773625-518
	objectGUID=0ac2a55f-5f6f-42c5-b437-cec32d949752
	whenChanged=09:33.32 AM, Wed 11/05/2025
	whenCreated=09:18.21 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30012
	uSNCreated=12336
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141821.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483640
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local
	member=CN=Administrator,CN=Users,DC=allports,DC=local
	description=Designated administrators of the schema


_raw:
11/05/2025 09:33:32.560
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Kai Hill
	distinguishedName=CN=Kai Hill,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Kai
	sn=Hill
	cn=Kai Hill
Object Details:
	sAMAccountType=805306368
	sAMAccountName=khill
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2384545126-3094289152-2355773625-1985
	primaryGroupID=513
	pwdLastSet=09:21.44 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=860ea95c-3b6a-48b8-a806-0dabcf4af1be
	whenChanged=09:33.32 AM, Wed 11/05/2025
	whenCreated=09:21.44 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30011
	uSNCreated=18094
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=20294 Fletcher Turnpike, Fostertown, DE 39758
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 09:33:32.544
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Administrator
	distinguishedName=CN=Administrator,CN=Users,DC=allports,DC=local
	cn=Administrator
Object Details:
	sAMAccountType=805306368
	sAMAccountName=Administrator
	logonCount=1
	accountExpires=0
	objectSid=S-1-5-21-2384545126-3094289152-2355773625-500
	primaryGroupID=513
	pwdLastSet=09:10.34 AM, Wed 11/05/2025
	lastLogon=12:47.08 PM, Tue 06/21/2022
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=a776305c-922e-49da-89ff-0a8e0d40ebc9
	whenChanged=09:33.32 AM, Wed 11/05/2025
	whenCreated=09:17.19 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30009
	uSNCreated=8196
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141821.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	adminCount=1
	logonHours=<binary>
	memberOf=CN=Group Policy Creator Owners,CN=Users,DC=allports,DC=local|CN=Domain Admins,CN=Users,DC=allports,DC=local|CN=Enterprise Admins,CN=Users,DC=allports,DC=local|CN=Schema Admins,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	description=Built-in account for administering the computer/domain


_raw:
11/05/2025 09:33:32.529
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=James Porter
	distinguishedName=CN=James Porter,OU=Executive,OU=Departments,DC=allports,DC=local
	givenName=James
	sn=Porter
	cn=James Porter
Object Details:
	sAMAccountType=805306368
	sAMAccountName=jporter
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2384545126-3094289152-2355773625-1138
	primaryGroupID=513
	pwdLastSet=09:20.52 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=00ec3058-b8d0-4d54-821c-e6432c5f8b93
	whenChanged=09:33.32 AM, Wed 11/05/2025
	whenCreated=09:20.52 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30007
	uSNCreated=12981
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=25652 Desiree Forge, West Juliefurt, OR 59085
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=CFO


_raw:
11/05/2025 09:33:32.498
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=David Carter
	distinguishedName=CN=David Carter,OU=Executive,OU=Departments,DC=allports,DC=local
	givenName=David
	sn=Carter
	cn=David Carter
Object Details:
	sAMAccountType=805306368
	sAMAccountName=dcarter
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2384545126-3094289152-2355773625-3329
	primaryGroupID=513
	pwdLastSet=09:23.04 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=b3c57349-056f-4f40-bae2-d8b1c22f7760
	whenChanged=09:33.32 AM, Wed 11/05/2025
	whenCreated=09:23.04 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30005
	uSNCreated=26189
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=80034 Stark Walks Apt. 756, Mcdanielberg, WY 73366
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Co-Founder & CEO


_raw:
11/05/2025 09:33:32.498
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Linda Vega
	distinguishedName=CN=Linda Vega,OU=Executive,OU=Departments,DC=allports,DC=local
	givenName=Linda
	sn=Vega
	cn=Linda Vega
Object Details:
	sAMAccountType=805306368
	sAMAccountName=lvega
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2384545126-3094289152-2355773625-1131
	primaryGroupID=513
	pwdLastSet=09:20.51 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=1d037643-05ce-4893-befc-bae470c81f14
	whenChanged=09:33.32 AM, Wed 11/05/2025
	whenCreated=09:20.51 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30003
	uSNCreated=12934
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=36745 Smith Drive, Grantberg, NJ 17682
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=CIO


_raw:
11/05/2025 09:33:32.466
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Admin
	displayName=Admin
	distinguishedName=CN=Admin,CN=Users,DC=allports,DC=local
	cn=Admin
Object Details:
	sAMAccountType=805306368
	sAMAccountName=Admin
	logonCount=1
	accountExpires=Never Expires
	objectSid=S-1-5-21-2384545126-3094289152-2355773625-1001
	primaryGroupID=513
	pwdLastSet=09:07.32 AM, Wed 11/05/2025
	lastLogon=09:06.48 AM, Wed 11/05/2025
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=66048
	objectGUID=8ea3d040-d5c3-4c67-86f4-2a67cca7dc97
	whenChanged=09:33.32 AM, Wed 11/05/2025
	whenCreated=09:17.19 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30001
	uSNCreated=8199
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141821.0Z|16010101000001.0Z
	adminCount=1
	memberOf=CN=Administrators,CN=Builtin,DC=allports,DC=local


_raw:
11/05/2025 09:33:32.466
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Isabella Clark
	distinguishedName=CN=Isabella Clark,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Isabella
	sn=Clark
	cn=Isabella Clark
Object Details:
	sAMAccountType=805306368
	sAMAccountName=iclark1
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2384545126-3094289152-2355773625-3155
	primaryGroupID=513
	pwdLastSet=09:22.54 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=276a863a-3fd8-4b34-a60e-b3e0c4f426b0
	whenChanged=09:33.32 AM, Wed 11/05/2025
	whenCreated=09:22.54 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=29999
	uSNCreated=25142
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=8686 Rachel Fords, Port Jason, NE 94930
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 09:33:32.466
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Nora Nelson
	distinguishedName=CN=Nora Nelson,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Nora
	sn=Nelson
	cn=Nora Nelson
Object Details:
	sAMAccountType=805306368
	sAMAccountName=nnelson
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2384545126-3094289152-2355773625-1510
	primaryGroupID=513
	pwdLastSet=09:21.15 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=ddb27129-00da-400b-ba19-bd588c002207
	whenChanged=09:33.32 AM, Wed 11/05/2025
	whenCreated=09:21.15 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=29997
	uSNCreated=15233
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=886 Alexander Ridges Suite 360, West William, OK 83863
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 09:33:32.466
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Domain Admins
	distinguishedName=CN=Domain Admins,CN=Users,DC=allports,DC=local
	cn=Domain Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Domain Admins
	objectSid=S-1-5-21-2384545126-3094289152-2355773625-512
	objectGUID=4c733e25-c5d5-4b1d-b7bd-bba310d391b1
	whenChanged=09:33.32 AM, Wed 11/05/2025
	whenCreated=09:18.21 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=29995
	uSNCreated=12345
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141821.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483646
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	member=CN=Axel White,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Logan Clark,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Michael Rivera,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Erick Smith,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=David Carter,OU=Executive,OU=Departments,DC=allports,DC=local|CN=Isabella Clark,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Sarah Hill,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Eleanor Moore,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Penelope Brooks,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Kevin Miller,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Alessia Ross,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=John Taylor,OU=Executive,OU=Departments,DC=allports,DC=local|CN=Bailey Finn,OU=Administration,OU=Departments,DC=allports,DC=local|CN=Kai Hill,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Josie Young,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Ethan Fisher,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Nora Nelson,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Olivia Collins,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=James Porter,OU=Executive,OU=Departments,DC=allports,DC=local|CN=Linda Vega,OU=Executive,OU=Departments,DC=allports,DC=local|CN=Emily Carter,OU=Executive,OU=Departments,DC=allports,DC=local|CN=Administrator,CN=Users,DC=allports,DC=local
	description=Designated administrators of the domain


_raw:
11/05/2025 09:33:32.466
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Alessia Ross
	distinguishedName=CN=Alessia Ross,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Alessia
	sn=Ross
	cn=Alessia Ross
Object Details:
	sAMAccountType=805306368
	sAMAccountName=aross1
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2384545126-3094289152-2355773625-2431
	primaryGroupID=513
	pwdLastSet=09:22.10 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=3686c121-2735-47fc-b48b-06f24e63a393
	whenChanged=09:33.32 AM, Wed 11/05/2025
	whenCreated=09:22.10 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=29994
	uSNCreated=20781
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=4994 Kathleen Overpass Apt. 818, Port Larryborough, ND 84763
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 09:33:32.466
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Eleanor Moore
	distinguishedName=CN=Eleanor Moore,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Eleanor
	sn=Moore
	cn=Eleanor Moore
Object Details:
	sAMAccountType=805306368
	sAMAccountName=emoore
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2384545126-3094289152-2355773625-2661
	primaryGroupID=513
	pwdLastSet=09:22.24 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=5620d614-df35-47a1-8ae6-6bf96941477e
	whenChanged=09:33.32 AM, Wed 11/05/2025
	whenCreated=09:22.24 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=29992
	uSNCreated=22170
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=212 James Vista, Porterport, NH 76563
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 09:33:32.388
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Container,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=AdminSDHolder
	distinguishedName=CN=AdminSDHolder,CN=System,DC=allports,DC=local
	cn=AdminSDHolder
Object Details:
	objectGUID=b2d1ac1c-3156-4705-b0ea-3584858ff6c9
	whenChanged=09:33.32 AM, Wed 11/05/2025
	whenCreated=09:17.19 AM, Wed 11/05/2025
	objectClass=top|container
Event Details:
	uSNChanged=29990
	uSNCreated=5704
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141821.0Z|16010101000000.0Z
	isCriticalSystemObject=TRUE
	systemFlags=-1946157056
	showInAdvancedViewOnly=TRUE


_raw:
11/05/2025 09:32:57.682
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Domain Controllers
	distinguishedName=CN=Domain Controllers,CN=Users,DC=allports,DC=local
	cn=Domain Controllers
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Domain Controllers
	objectSid=S-1-5-21-3545024809-2929664772-3070034495-516
	objectGUID=84f344ad-34a9-48ec-8c6c-3b78050d1b9d
	whenChanged=09:32.57 AM, Wed 11/05/2025
	whenCreated=09:17.45 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30057
	uSNCreated=12333
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141745.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483646
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local
	description=All domain controllers in the domain


_raw:
11/05/2025 09:32:57.666
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Read-only Domain Controllers
	distinguishedName=CN=Read-only Domain Controllers,CN=Users,DC=allports,DC=local
	cn=Read-only Domain Controllers
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Read-only Domain Controllers
	objectSid=S-1-5-21-3545024809-2929664772-3070034495-521
	objectGUID=2453d1a1-82b8-4420-bcd2-e15c37916eef
	whenChanged=09:32.57 AM, Wed 11/05/2025
	whenCreated=09:17.45 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30056
	uSNCreated=12419
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141745.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483646
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local
	description=Members of this group are Read-Only Domain Controllers in the domain


_raw:
11/05/2025 09:32:57.634
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=krbtgt
	distinguishedName=CN=krbtgt,CN=Users,DC=allports,DC=local
	cn=krbtgt
Object Details:
	sAMAccountType=805306368
	sAMAccountName=krbtgt
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3545024809-2929664772-3070034495-502
	primaryGroupID=513
	pwdLastSet=09:17.45 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=514
	objectGUID=81b6a928-7c16-4745-b1a8-e877478d0cc5
	whenChanged=09:32.57 AM, Wed 11/05/2025
	whenCreated=09:17.45 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30055
	uSNCreated=12324
	instanceType=4
Additional Details:
	msDS-SupportedEncryptionTypes=0
	dSCorePropagationData=20251105141745.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	servicePrincipalName=kadmin/changepw
	adminCount=1
	showInAdvancedViewOnly=TRUE
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local
	description=Key Distribution Center Service Account


_raw:
11/05/2025 09:32:57.588
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Account Operators
	distinguishedName=CN=Account Operators,CN=Builtin,DC=allports,DC=local
	cn=Account Operators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Account Operators
	objectSid=S-1-5-32-548
	objectGUID=89ffac9b-b125-490f-8e3e-3f868ce8c7b9
	whenChanged=09:32.57 AM, Wed 11/05/2025
	whenCreated=09:17.45 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30053
	uSNCreated=12363
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141745.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Members can administer domain user and group accounts


_raw:
11/05/2025 09:32:57.572
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Backup Operators
	distinguishedName=CN=Backup Operators,CN=Builtin,DC=allports,DC=local
	cn=Backup Operators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Backup Operators
	objectSid=S-1-5-32-551
	objectGUID=61b36c5c-e573-46e3-919c-dedc37cb110a
	whenChanged=09:32.57 AM, Wed 11/05/2025
	whenCreated=09:16.41 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30052
	uSNCreated=8216
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105143257.0Z|20251105141745.0Z|16010101000416.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Backup Operators can override security restrictions for the sole purpose of backing up or restoring files


_raw:
11/05/2025 09:32:57.572
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Print Operators
	distinguishedName=CN=Print Operators,CN=Builtin,DC=allports,DC=local
	cn=Print Operators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Print Operators
	objectSid=S-1-5-32-550
	objectGUID=7149f95a-4797-492b-a4e7-12f2863cbc22
	whenChanged=09:32.57 AM, Wed 11/05/2025
	whenCreated=09:16.41 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30050
	uSNCreated=8215
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141745.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Members can administer printers installed on domain controllers


_raw:
11/05/2025 09:32:57.525
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Administrators
	distinguishedName=CN=Administrators,CN=Builtin,DC=allports,DC=local
	cn=Administrators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Administrators
	objectSid=S-1-5-32-544
	objectGUID=85f0de24-86d3-43fb-a85f-52e62090669b
	whenChanged=09:32.57 AM, Wed 11/05/2025
	whenCreated=09:16.41 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30048
	uSNCreated=8201
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141745.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	member=CN=Domain Admins,CN=Users,DC=allports,DC=local|CN=Enterprise Admins,CN=Users,DC=allports,DC=local|CN=Admin,CN=Users,DC=allports,DC=local|CN=cloudbase-init,CN=Users,DC=allports,DC=local|CN=Administrator,CN=Users,DC=allports,DC=local
	description=Administrators have complete and unrestricted access to the computer/domain


_raw:
11/05/2025 09:32:57.494
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Server Operators
	distinguishedName=CN=Server Operators,CN=Builtin,DC=allports,DC=local
	cn=Server Operators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Server Operators
	objectSid=S-1-5-32-549
	objectGUID=304cf722-a5ad-41aa-9822-457b1202379a
	whenChanged=09:32.57 AM, Wed 11/05/2025
	whenCreated=09:17.45 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30046
	uSNCreated=12360
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141745.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Members can administer domain servers


_raw:
11/05/2025 09:32:57.478
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Replicator
	distinguishedName=CN=Replicator,CN=Builtin,DC=allports,DC=local
	cn=Replicator
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Replicator
	objectSid=S-1-5-32-552
	objectGUID=90267513-c2f0-4ca7-9999-5ec91257ad2c
	whenChanged=09:32.57 AM, Wed 11/05/2025
	whenCreated=09:16.41 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30045
	uSNCreated=8217
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141745.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Supports file replication in a domain


_raw:
11/05/2025 09:32:57.462
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Penelope Brooks
	distinguishedName=CN=Penelope Brooks,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Penelope
	sn=Brooks
	cn=Penelope Brooks
Object Details:
	sAMAccountType=805306368
	sAMAccountName=pbrooks
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3545024809-2929664772-3070034495-2496
	primaryGroupID=513
	pwdLastSet=09:21.38 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=826e6ced-5699-4383-9d83-cf2ee65cee22
	whenChanged=09:32.57 AM, Wed 11/05/2025
	whenCreated=09:21.38 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30043
	uSNCreated=21177
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=373 Dickson Pike, Darrenstad, VA 06979
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 09:32:57.432
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=David Carter
	distinguishedName=CN=David Carter,OU=Executive,OU=Departments,DC=allports,DC=local
	givenName=David
	sn=Carter
	cn=David Carter
Object Details:
	sAMAccountType=805306368
	sAMAccountName=dcarter
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3545024809-2929664772-3070034495-3329
	primaryGroupID=513
	pwdLastSet=09:22.28 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=59dc37ec-6596-472c-84a0-f115b29470f0
	whenChanged=09:32.57 AM, Wed 11/05/2025
	whenCreated=09:22.28 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30041
	uSNCreated=26189
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=80034 Stark Walks Apt. 756, Mcdanielberg, WY 73366
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Co-Founder & CEO


_raw:
11/05/2025 09:32:57.432
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Axel White
	distinguishedName=CN=Axel White,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Axel
	sn=White
	cn=Axel White
Object Details:
	sAMAccountType=805306368
	sAMAccountName=awhite1
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3545024809-2929664772-3070034495-3866
	primaryGroupID=513
	pwdLastSet=09:23.01 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=4c35e3e7-59d0-40c2-acdc-0f866ae848ba
	whenChanged=09:32.57 AM, Wed 11/05/2025
	whenCreated=09:23.01 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30039
	uSNCreated=29436
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=2130 David Mount, West Meganland, AZ 73217
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 09:32:57.416
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Domain Admins
	distinguishedName=CN=Domain Admins,CN=Users,DC=allports,DC=local
	cn=Domain Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Domain Admins
	objectSid=S-1-5-21-3545024809-2929664772-3070034495-512
	objectGUID=9a0711db-324d-46c2-90d0-bde1bfd75700
	whenChanged=09:32.57 AM, Wed 11/05/2025
	whenCreated=09:17.45 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30037
	uSNCreated=12345
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141745.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483646
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	member=CN=Axel White,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Logan Clark,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Michael Rivera,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Erick Smith,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=David Carter,OU=Executive,OU=Departments,DC=allports,DC=local|CN=Isabella Clark,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Sarah Hill,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Eleanor Moore,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Penelope Brooks,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Kevin Miller,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Alessia Ross,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=John Taylor,OU=Executive,OU=Departments,DC=allports,DC=local|CN=Bailey Finn,OU=Administration,OU=Departments,DC=allports,DC=local|CN=Kai Hill,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Josie Young,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Ethan Fisher,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Nora Nelson,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Olivia Collins,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=James Porter,OU=Executive,OU=Departments,DC=allports,DC=local|CN=Linda Vega,OU=Executive,OU=Departments,DC=allports,DC=local|CN=Emily Carter,OU=Executive,OU=Departments,DC=allports,DC=local|CN=Administrator,CN=Users,DC=allports,DC=local
	description=Designated administrators of the domain


_raw:
11/05/2025 09:32:57.384
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Linda Vega
	distinguishedName=CN=Linda Vega,OU=Executive,OU=Departments,DC=allports,DC=local
	givenName=Linda
	sn=Vega
	cn=Linda Vega
Object Details:
	sAMAccountType=805306368
	sAMAccountName=lvega
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3545024809-2929664772-3070034495-1131
	primaryGroupID=513
	pwdLastSet=09:20.16 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=1de33dd5-fa30-4b24-97d6-b7b5e24bbb4e
	whenChanged=09:32.57 AM, Wed 11/05/2025
	whenCreated=09:20.16 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30036
	uSNCreated=12934
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=36745 Smith Drive, Grantberg, NJ 17682
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=CIO


_raw:
11/05/2025 09:32:57.384
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=John Taylor
	distinguishedName=CN=John Taylor,OU=Executive,OU=Departments,DC=allports,DC=local
	givenName=John
	sn=Taylor
	cn=John Taylor
Object Details:
	sAMAccountType=805306368
	sAMAccountName=jtaylor
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3545024809-2929664772-3070034495-2402
	primaryGroupID=513
	pwdLastSet=09:21.32 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=c0414ad2-dc6e-4d9b-9fea-90eded38058b
	whenChanged=09:32.57 AM, Wed 11/05/2025
	whenCreated=09:21.32 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30034
	uSNCreated=20604
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=80159 Rebekah Tunnel, Kevinmouth, NY 57903
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=CISO


_raw:
11/05/2025 09:32:57.369
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Ethan Fisher
	distinguishedName=CN=Ethan Fisher,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Ethan
	sn=Fisher
	cn=Ethan Fisher
Object Details:
	sAMAccountType=805306368
	sAMAccountName=efisher
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3545024809-2929664772-3070034495-1618
	primaryGroupID=513
	pwdLastSet=09:20.45 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=b8ef48c8-e870-45f1-b4ff-4a4fa9ab1423
	whenChanged=09:32.57 AM, Wed 11/05/2025
	whenCreated=09:20.45 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30032
	uSNCreated=15884
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=79800 Bruce Vista, Hortonberg, HI 64197
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 09:32:57.369
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Schema Admins
	distinguishedName=CN=Schema Admins,CN=Users,DC=allports,DC=local
	cn=Schema Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Schema Admins
	objectSid=S-1-5-21-3545024809-2929664772-3070034495-518
	objectGUID=4db6a2c0-43fa-46d8-8261-b4e37fbd25be
	whenChanged=09:32.57 AM, Wed 11/05/2025
	whenCreated=09:17.45 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30030
	uSNCreated=12336
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105143257.0Z|20251105141745.0Z|16010101000416.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483640
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local
	member=CN=Administrator,CN=Users,DC=allports,DC=local
	description=Designated administrators of the schema


_raw:
11/05/2025 09:32:57.369
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Olivia Collins
	distinguishedName=CN=Olivia Collins,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Olivia
	sn=Collins
	cn=Olivia Collins
Object Details:
	sAMAccountType=805306368
	sAMAccountName=ocollins
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3545024809-2929664772-3070034495-1169
	primaryGroupID=513
	pwdLastSet=09:20.18 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=e18f7fa6-753b-419e-a2e5-e1f20b045b5e
	whenChanged=09:32.57 AM, Wed 11/05/2025
	whenCreated=09:20.18 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30029
	uSNCreated=13178
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=20251105143257.0Z|16010101000000.0Z
	adminCount=1
	streetAddress=24735 Webster Locks, North Jonathanton, MD 97223
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 09:32:57.353
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Logan Clark
	distinguishedName=CN=Logan Clark,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Logan
	sn=Clark
	cn=Logan Clark
Object Details:
	sAMAccountType=805306368
	sAMAccountName=lclark1
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3545024809-2929664772-3070034495-3751
	primaryGroupID=513
	pwdLastSet=09:22.54 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=d23fa5a0-a211-430c-886c-ec35acc5965c
	whenChanged=09:32.57 AM, Wed 11/05/2025
	whenCreated=09:22.54 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30027
	uSNCreated=28732
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=29325 Rebecca Estate, Lake Ronald, CO 85102
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 09:32:57.353
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Bailey Finn
	distinguishedName=CN=Bailey Finn,OU=Administration,OU=Departments,DC=allports,DC=local
	givenName=Bailey
	sn=Finn
	cn=Bailey Finn
Object Details:
	sAMAccountType=805306368
	sAMAccountName=bfinn
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3545024809-2929664772-3070034495-2009
	primaryGroupID=513
	pwdLastSet=09:21.09 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=dc52c097-b7bc-4463-8762-877d857ace34
	whenChanged=09:32.57 AM, Wed 11/05/2025
	whenCreated=09:21.09 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30025
	uSNCreated=18241
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=20251105143257.0Z|16010101000000.0Z
	adminCount=1
	streetAddress=USNS Jackson, FPO AP 90789
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Director of Technical Services


_raw:
11/05/2025 09:32:57.337
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Eleanor Moore
	distinguishedName=CN=Eleanor Moore,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Eleanor
	sn=Moore
	cn=Eleanor Moore
Object Details:
	sAMAccountType=805306368
	sAMAccountName=emoore
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3545024809-2929664772-3070034495-2661
	primaryGroupID=513
	pwdLastSet=09:21.48 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=99d4f78a-89d3-4961-b612-ea6d91dae9ab
	whenChanged=09:32.57 AM, Wed 11/05/2025
	whenCreated=09:21.48 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30023
	uSNCreated=22170
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=212 James Vista, Porterport, NH 76563
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 09:32:57.337
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Kevin Miller
	distinguishedName=CN=Kevin Miller,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Kevin
	sn=Miller
	cn=Kevin Miller
Object Details:
	sAMAccountType=805306368
	sAMAccountName=kmiller
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3545024809-2929664772-3070034495-2444
	primaryGroupID=513
	pwdLastSet=09:21.35 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=be435383-e8b3-4bf3-99db-79607ae8edbb
	whenChanged=09:32.57 AM, Wed 11/05/2025
	whenCreated=09:21.35 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30021
	uSNCreated=20862
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=041 Ronnie Branch, Oconnellfort, WV 97644
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 09:32:57.306
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Admin
	displayName=Admin
	distinguishedName=CN=Admin,CN=Users,DC=allports,DC=local
	cn=Admin
Object Details:
	sAMAccountType=805306368
	sAMAccountName=Admin
	logonCount=1
	accountExpires=Never Expires
	objectSid=S-1-5-21-3545024809-2929664772-3070034495-1001
	primaryGroupID=513
	pwdLastSet=09:06.23 AM, Wed 11/05/2025
	lastLogon=09:05.42 AM, Wed 11/05/2025
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=66048
	objectGUID=082f287b-024c-4c13-ac00-878834204697
	whenChanged=09:32.57 AM, Wed 11/05/2025
	whenCreated=09:16.41 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30019
	uSNCreated=8199
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141745.0Z|16010101000001.0Z
	adminCount=1
	memberOf=CN=Administrators,CN=Builtin,DC=allports,DC=local


_raw:
11/05/2025 09:32:57.306
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Enterprise Key Admins
	distinguishedName=CN=Enterprise Key Admins,CN=Users,DC=allports,DC=local
	cn=Enterprise Key Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Enterprise Key Admins
	objectSid=S-1-5-21-3545024809-2929664772-3070034495-527
	objectGUID=78f31578-a9b0-40a4-b37d-55d2e486aa50
	whenChanged=09:32.57 AM, Wed 11/05/2025
	whenCreated=09:17.45 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30017
	uSNCreated=12453
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105143257.0Z|20251105141745.0Z|16010101000416.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483640
	adminCount=1
	description=Members of this group can perform administrative actions on key objects within the forest.


_raw:
11/05/2025 09:32:57.306
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=James Porter
	distinguishedName=CN=James Porter,OU=Executive,OU=Departments,DC=allports,DC=local
	givenName=James
	sn=Porter
	cn=James Porter
Object Details:
	sAMAccountType=805306368
	sAMAccountName=jporter
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3545024809-2929664772-3070034495-1138
	primaryGroupID=513
	pwdLastSet=09:20.17 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=1674e96a-c943-429d-ae38-09e8599a6437
	whenChanged=09:32.57 AM, Wed 11/05/2025
	whenCreated=09:20.17 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30016
	uSNCreated=12981
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=25652 Desiree Forge, West Juliefurt, OR 59085
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=CFO


_raw:
11/05/2025 09:32:57.306
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=cloudbase-init
	displayName=cloudbase-init
	distinguishedName=CN=cloudbase-init,CN=Users,DC=allports,DC=local
	cn=cloudbase-init
Object Details:
	sAMAccountType=805306368
	sAMAccountName=cloudbase-init
	logonCount=5
	accountExpires=Never Expires
	objectSid=S-1-5-21-3545024809-2929664772-3070034495-1000
	primaryGroupID=513
	pwdLastSet=09:07.53 AM, Wed 11/05/2025
	lastLogon=09:18.25 AM, Wed 11/05/2025
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=66048
	objectGUID=b4a56467-bc9a-4bf4-9d0e-9420e6586145
	whenChanged=09:32.57 AM, Wed 11/05/2025
	whenCreated=09:16.41 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30014
	uSNCreated=8198
	instanceType=4
Additional Details:
	lastLogonTimestamp=09:18.25 AM, Wed 11/05/2025
	dSCorePropagationData=20251105141745.0Z|16010101000001.0Z
	adminCount=1
	memberOf=CN=Administrators,CN=Builtin,DC=allports,DC=local


_raw:
11/05/2025 09:32:57.306
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Erick Smith
	distinguishedName=CN=Erick Smith,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Erick
	sn=Smith
	cn=Erick Smith
Object Details:
	sAMAccountType=805306368
	sAMAccountName=esmith
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3545024809-2929664772-3070034495-3646
	primaryGroupID=513
	pwdLastSet=09:22.47 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=b4f8955e-71f0-4d83-8ab4-c1fa3e1c5003
	whenChanged=09:32.57 AM, Wed 11/05/2025
	whenCreated=09:22.47 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30012
	uSNCreated=28096
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=569 Carrie Route Apt. 586, Lake James, NV 94321
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 09:32:57.306
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Kai Hill
	distinguishedName=CN=Kai Hill,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Kai
	sn=Hill
	cn=Kai Hill
Object Details:
	sAMAccountType=805306368
	sAMAccountName=khill
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3545024809-2929664772-3070034495-1985
	primaryGroupID=513
	pwdLastSet=09:21.07 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=66a18a48-4fb4-4803-9999-b4a4acdf9f36
	whenChanged=09:32.57 AM, Wed 11/05/2025
	whenCreated=09:21.07 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30010
	uSNCreated=18094
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=20294 Fletcher Turnpike, Fostertown, DE 39758
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 09:32:57.306
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Nora Nelson
	distinguishedName=CN=Nora Nelson,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Nora
	sn=Nelson
	cn=Nora Nelson
Object Details:
	sAMAccountType=805306368
	sAMAccountName=nnelson
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3545024809-2929664772-3070034495-1510
	primaryGroupID=513
	pwdLastSet=09:20.39 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=c7386f47-cc94-4732-83b8-7b3e40941934
	whenChanged=09:32.57 AM, Wed 11/05/2025
	whenCreated=09:20.39 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30008
	uSNCreated=15233
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=886 Alexander Ridges Suite 360, West William, OK 83863
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 09:32:57.306
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Sarah Hill
	distinguishedName=CN=Sarah Hill,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Sarah
	sn=Hill
	cn=Sarah Hill
Object Details:
	sAMAccountType=805306368
	sAMAccountName=shill
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3545024809-2929664772-3070034495-3089
	primaryGroupID=513
	pwdLastSet=09:22.14 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=5688682a-5248-4d46-9e05-40cdee1e250a
	whenChanged=09:32.57 AM, Wed 11/05/2025
	whenCreated=09:22.14 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30006
	uSNCreated=24743
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=837 Wolfe Street, Mitchellhaven, VT 83781
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 09:32:57.306
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Michael Rivera
	distinguishedName=CN=Michael Rivera,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Michael
	sn=Rivera
	cn=Michael Rivera
Object Details:
	sAMAccountType=805306368
	sAMAccountName=mrivera1
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3545024809-2929664772-3070034495-3719
	primaryGroupID=513
	pwdLastSet=09:22.52 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=e6ad1d28-20c7-43c0-8dbc-473c37e42fba
	whenChanged=09:32.57 AM, Wed 11/05/2025
	whenCreated=09:22.52 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30004
	uSNCreated=28537
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=11949 Gray Meadows Apt. 897, Lindseyberg, NV 06447
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 09:32:57.306
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Emily Carter
	distinguishedName=CN=Emily Carter,OU=Executive,OU=Departments,DC=allports,DC=local
	givenName=Emily
	sn=Carter
	cn=Emily Carter
Object Details:
	sAMAccountType=805306368
	sAMAccountName=ecarter
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3545024809-2929664772-3070034495-1106
	primaryGroupID=513
	pwdLastSet=09:20.14 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=f68e9f27-b350-4fbe-9ade-af7fab37f26f
	whenChanged=09:32.57 AM, Wed 11/05/2025
	whenCreated=09:20.14 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30002
	uSNCreated=12773
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=20251105142015.0Z|16010101000000.0Z
	adminCount=1
	streetAddress=5325 Rogers Village, Lydiaport, KY 37558
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Co-Founder & COO


_raw:
11/05/2025 09:32:57.291
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Josie Young
	distinguishedName=CN=Josie Young,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Josie
	sn=Young
	cn=Josie Young
Object Details:
	sAMAccountType=805306368
	sAMAccountName=jyoung
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3545024809-2929664772-3070034495-1897
	primaryGroupID=513
	pwdLastSet=09:21.02 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=2d6af824-01cc-45c4-898a-39f1299da9c6
	whenChanged=09:32.57 AM, Wed 11/05/2025
	whenCreated=09:21.02 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30000
	uSNCreated=17563
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=49085 Tucker Circles Suite 272, Novakborough, RI 93174
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 09:32:57.291
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Isabella Clark
	distinguishedName=CN=Isabella Clark,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Isabella
	sn=Clark
	cn=Isabella Clark
Object Details:
	sAMAccountType=805306368
	sAMAccountName=iclark1
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3545024809-2929664772-3070034495-3155
	primaryGroupID=513
	pwdLastSet=09:22.18 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=3311dd1d-540f-42b9-b8cb-cb37f2fbd242
	whenChanged=09:32.57 AM, Wed 11/05/2025
	whenCreated=09:22.18 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=29998
	uSNCreated=25142
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=8686 Rachel Fords, Port Jason, NE 94930
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 09:32:57.291
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Key Admins
	distinguishedName=CN=Key Admins,CN=Users,DC=allports,DC=local
	cn=Key Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Key Admins
	objectSid=S-1-5-21-3545024809-2929664772-3070034495-526
	objectGUID=3ce06f11-ecc8-48f4-a039-f16016f387d3
	whenChanged=09:32.57 AM, Wed 11/05/2025
	whenCreated=09:17.45 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=29996
	uSNCreated=12450
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141745.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483646
	adminCount=1
	description=Members of this group can perform administrative actions on key objects within the domain.


_raw:
11/05/2025 09:32:57.291
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Enterprise Admins
	distinguishedName=CN=Enterprise Admins,CN=Users,DC=allports,DC=local
	cn=Enterprise Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Enterprise Admins
	objectSid=S-1-5-21-3545024809-2929664772-3070034495-519
	objectGUID=4005da10-fb63-492d-86e9-c09132088da8
	whenChanged=09:32.57 AM, Wed 11/05/2025
	whenCreated=09:17.45 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=29995
	uSNCreated=12339
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141745.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483640
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	member=CN=Administrator,CN=Users,DC=allports,DC=local
	description=Designated administrators of the enterprise


_raw:
11/05/2025 09:32:57.291
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Alessia Ross
	distinguishedName=CN=Alessia Ross,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Alessia
	sn=Ross
	cn=Alessia Ross
Object Details:
	sAMAccountType=805306368
	sAMAccountName=aross1
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3545024809-2929664772-3070034495-2431
	primaryGroupID=513
	pwdLastSet=09:21.34 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=e97a2f0f-bea0-4cf1-bc95-4fa345a2b92b
	whenChanged=09:32.57 AM, Wed 11/05/2025
	whenCreated=09:21.34 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=29994
	uSNCreated=20781
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=20251105143257.0Z|16010101000000.0Z
	adminCount=1
	streetAddress=4994 Kathleen Overpass Apt. 818, Port Larryborough, ND 84763
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 09:32:57.291
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Administrator
	distinguishedName=CN=Administrator,CN=Users,DC=allports,DC=local
	cn=Administrator
Object Details:
	sAMAccountType=805306368
	sAMAccountName=Administrator
	logonCount=1
	accountExpires=0
	objectSid=S-1-5-21-3545024809-2929664772-3070034495-500
	primaryGroupID=513
	pwdLastSet=09:09.55 AM, Wed 11/05/2025
	lastLogon=12:47.08 PM, Tue 06/21/2022
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=75d0f307-99e1-479b-9580-3b61e8aa9eef
	whenChanged=09:32.57 AM, Wed 11/05/2025
	whenCreated=09:16.41 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=29992
	uSNCreated=8196
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105143257.0Z|20251105141745.0Z|16010101000416.0Z
	isCriticalSystemObject=TRUE
	adminCount=1
	logonHours=<binary>
	memberOf=CN=Group Policy Creator Owners,CN=Users,DC=allports,DC=local|CN=Domain Admins,CN=Users,DC=allports,DC=local|CN=Enterprise Admins,CN=Users,DC=allports,DC=local|CN=Schema Admins,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	description=Built-in account for administering the computer/domain


_raw:
11/05/2025 09:32:57.181
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Container,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=AdminSDHolder
	distinguishedName=CN=AdminSDHolder,CN=System,DC=allports,DC=local
	cn=AdminSDHolder
Object Details:
	objectGUID=999a9ec1-77db-40e2-859b-004c225ac18c
	whenChanged=09:32.57 AM, Wed 11/05/2025
	whenCreated=09:16.41 AM, Wed 11/05/2025
	objectClass=top|container
Event Details:
	uSNChanged=29990
	uSNCreated=5704
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141745.0Z|16010101000000.0Z
	isCriticalSystemObject=TRUE
	systemFlags=-1946157056
	showInAdvancedViewOnly=TRUE


_raw:
11/05/2025 09:32:37.271
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Domain Controllers
	distinguishedName=CN=Domain Controllers,CN=Users,DC=allports,DC=local
	cn=Domain Controllers
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Domain Controllers
	objectSid=S-1-5-21-3169561533-3046981224-3775061561-516
	objectGUID=e853b4c2-e16e-47d7-bbeb-eccd8dc93131
	whenChanged=09:32.37 AM, Wed 11/05/2025
	whenCreated=09:17.26 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30055
	uSNCreated=12333
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141726.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483646
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local
	description=All domain controllers in the domain


_raw:
11/05/2025 09:32:37.271
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Read-only Domain Controllers
	distinguishedName=CN=Read-only Domain Controllers,CN=Users,DC=allports,DC=local
	cn=Read-only Domain Controllers
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Read-only Domain Controllers
	objectSid=S-1-5-21-3169561533-3046981224-3775061561-521
	objectGUID=eb9c8c22-8093-49a5-91b1-ade05fd39d4c
	whenChanged=09:32.37 AM, Wed 11/05/2025
	whenCreated=09:17.26 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30054
	uSNCreated=12419
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141726.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483646
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local
	description=Members of this group are Read-Only Domain Controllers in the domain


_raw:
11/05/2025 09:32:37.256
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=krbtgt
	distinguishedName=CN=krbtgt,CN=Users,DC=allports,DC=local
	cn=krbtgt
Object Details:
	sAMAccountType=805306368
	sAMAccountName=krbtgt
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3169561533-3046981224-3775061561-502
	primaryGroupID=513
	pwdLastSet=09:17.26 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=514
	objectGUID=70f829be-bdaa-4923-af26-3bab29842564
	whenChanged=09:32.37 AM, Wed 11/05/2025
	whenCreated=09:17.26 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30052
	uSNCreated=12324
	instanceType=4
Additional Details:
	msDS-SupportedEncryptionTypes=0
	dSCorePropagationData=20251105141726.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	servicePrincipalName=kadmin/changepw
	adminCount=1
	showInAdvancedViewOnly=TRUE
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local
	description=Key Distribution Center Service Account


_raw:
11/05/2025 09:32:37.256
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Account Operators
	distinguishedName=CN=Account Operators,CN=Builtin,DC=allports,DC=local
	cn=Account Operators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Account Operators
	objectSid=S-1-5-32-548
	objectGUID=777b34fa-3ca5-4b88-9f69-a985d96a5ee3
	whenChanged=09:32.37 AM, Wed 11/05/2025
	whenCreated=09:17.26 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30051
	uSNCreated=12363
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141726.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Members can administer domain user and group accounts


_raw:
11/05/2025 09:32:37.240
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Backup Operators
	distinguishedName=CN=Backup Operators,CN=Builtin,DC=allports,DC=local
	cn=Backup Operators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Backup Operators
	objectSid=S-1-5-32-551
	objectGUID=31b83ef8-eaa1-46bd-bdf2-be5523f9a36b
	whenChanged=09:32.37 AM, Wed 11/05/2025
	whenCreated=09:16.20 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30050
	uSNCreated=8216
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141726.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Backup Operators can override security restrictions for the sole purpose of backing up or restoring files


_raw:
11/05/2025 09:32:37.240
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Administrators
	distinguishedName=CN=Administrators,CN=Builtin,DC=allports,DC=local
	cn=Administrators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Administrators
	objectSid=S-1-5-32-544
	objectGUID=02907af7-a9cf-4156-ba02-cc5c94c81691
	whenChanged=09:32.37 AM, Wed 11/05/2025
	whenCreated=09:16.20 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30048
	uSNCreated=8201
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141726.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	member=CN=Domain Admins,CN=Users,DC=allports,DC=local|CN=Enterprise Admins,CN=Users,DC=allports,DC=local|CN=Admin,CN=Users,DC=allports,DC=local|CN=cloudbase-init,CN=Users,DC=allports,DC=local|CN=Administrator,CN=Users,DC=allports,DC=local
	description=Administrators have complete and unrestricted access to the computer/domain


_raw:
11/05/2025 09:32:37.240
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Server Operators
	distinguishedName=CN=Server Operators,CN=Builtin,DC=allports,DC=local
	cn=Server Operators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Server Operators
	objectSid=S-1-5-32-549
	objectGUID=99055d2f-8921-43c9-ad41-484b875a00b8
	whenChanged=09:32.37 AM, Wed 11/05/2025
	whenCreated=09:17.26 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30046
	uSNCreated=12360
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141726.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Members can administer domain servers


_raw:
11/05/2025 09:32:37.224
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Replicator
	distinguishedName=CN=Replicator,CN=Builtin,DC=allports,DC=local
	cn=Replicator
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Replicator
	objectSid=S-1-5-32-552
	objectGUID=2dfd581f-d5bc-47e0-ae22-93c5e04d039a
	whenChanged=09:32.37 AM, Wed 11/05/2025
	whenCreated=09:16.20 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30045
	uSNCreated=8217
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141726.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Supports file replication in a domain


_raw:
11/05/2025 09:32:37.224
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Print Operators
	distinguishedName=CN=Print Operators,CN=Builtin,DC=allports,DC=local
	cn=Print Operators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Print Operators
	objectSid=S-1-5-32-550
	objectGUID=8d88691b-89eb-4512-b0cb-c97985590bd9
	whenChanged=09:32.37 AM, Wed 11/05/2025
	whenCreated=09:16.20 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30043
	uSNCreated=8215
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141726.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Members can administer printers installed on domain controllers


_raw:
11/05/2025 09:32:37.224
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Erick Smith
	distinguishedName=CN=Erick Smith,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Erick
	sn=Smith
	cn=Erick Smith
Object Details:
	sAMAccountType=805306368
	sAMAccountName=esmith
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3169561533-3046981224-3775061561-3646
	primaryGroupID=513
	pwdLastSet=09:22.27 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=ed302bff-b319-4088-affd-e66112eaf197
	whenChanged=09:32.37 AM, Wed 11/05/2025
	whenCreated=09:22.27 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30041
	uSNCreated=28094
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=20251105143237.0Z|16010101000000.0Z
	adminCount=1
	streetAddress=569 Carrie Route Apt. 586, Lake James, NV 94321
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 09:32:37.209
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Admin
	displayName=Admin
	distinguishedName=CN=Admin,CN=Users,DC=allports,DC=local
	cn=Admin
Object Details:
	sAMAccountType=805306368
	sAMAccountName=Admin
	logonCount=1
	accountExpires=Never Expires
	objectSid=S-1-5-21-3169561533-3046981224-3775061561-1001
	primaryGroupID=513
	pwdLastSet=09:06.32 AM, Wed 11/05/2025
	lastLogon=09:05.43 AM, Wed 11/05/2025
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=66048
	objectGUID=6109dfea-048e-4441-a0b4-6cd37bb093c3
	whenChanged=09:32.37 AM, Wed 11/05/2025
	whenCreated=09:16.20 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30039
	uSNCreated=8199
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105143237.0Z|20251105141726.0Z|16010101000416.0Z
	adminCount=1
	memberOf=CN=Administrators,CN=Builtin,DC=allports,DC=local


_raw:
11/05/2025 09:32:37.209
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Josie Young
	distinguishedName=CN=Josie Young,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Josie
	sn=Young
	cn=Josie Young
Object Details:
	sAMAccountType=805306368
	sAMAccountName=jyoung
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3169561533-3046981224-3775061561-1897
	primaryGroupID=513
	pwdLastSet=09:20.43 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=cfc584e0-f3f8-40a3-9b90-df083284d609
	whenChanged=09:32.37 AM, Wed 11/05/2025
	whenCreated=09:20.43 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30037
	uSNCreated=17561
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=49085 Tucker Circles Suite 272, Novakborough, RI 93174
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 09:32:37.193
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Bailey Finn
	distinguishedName=CN=Bailey Finn,OU=Administration,OU=Departments,DC=allports,DC=local
	givenName=Bailey
	sn=Finn
	cn=Bailey Finn
Object Details:
	sAMAccountType=805306368
	sAMAccountName=bfinn
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3169561533-3046981224-3775061561-2009
	primaryGroupID=513
	pwdLastSet=09:20.50 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=0c29c4da-df49-4005-b67b-73c34f06597f
	whenChanged=09:32.37 AM, Wed 11/05/2025
	whenCreated=09:20.50 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30035
	uSNCreated=18239
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=USNS Jackson, FPO AP 90789
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Director of Technical Services


_raw:
11/05/2025 09:32:37.193
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Key Admins
	distinguishedName=CN=Key Admins,CN=Users,DC=allports,DC=local
	cn=Key Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Key Admins
	objectSid=S-1-5-21-3169561533-3046981224-3775061561-526
	objectGUID=d398d7d8-976d-45da-935a-f2ae0b19cf3a
	whenChanged=09:32.37 AM, Wed 11/05/2025
	whenCreated=09:17.26 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30033
	uSNCreated=12450
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141726.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483646
	adminCount=1
	description=Members of this group can perform administrative actions on key objects within the domain.


_raw:
11/05/2025 09:32:37.193
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Linda Vega
	distinguishedName=CN=Linda Vega,OU=Executive,OU=Departments,DC=allports,DC=local
	givenName=Linda
	sn=Vega
	cn=Linda Vega
Object Details:
	sAMAccountType=805306368
	sAMAccountName=lvega
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3169561533-3046981224-3775061561-1131
	primaryGroupID=513
	pwdLastSet=09:19.56 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=a45965d4-9e88-4760-ae41-8e832df7a1b7
	whenChanged=09:32.37 AM, Wed 11/05/2025
	whenCreated=09:19.56 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30032
	uSNCreated=12932
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=20251105143237.0Z|16010101000000.0Z
	adminCount=1
	streetAddress=36745 Smith Drive, Grantberg, NJ 17682
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=CIO


_raw:
11/05/2025 09:32:37.177
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Sarah Hill
	distinguishedName=CN=Sarah Hill,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Sarah
	sn=Hill
	cn=Sarah Hill
Object Details:
	sAMAccountType=805306368
	sAMAccountName=shill
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3169561533-3046981224-3775061561-3089
	primaryGroupID=513
	pwdLastSet=09:21.54 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=09548ad2-1961-4650-8bd0-096306c0e814
	whenChanged=09:32.37 AM, Wed 11/05/2025
	whenCreated=09:21.54 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30030
	uSNCreated=24741
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=20251105143237.0Z|16010101000000.0Z
	adminCount=1
	streetAddress=837 Wolfe Street, Mitchellhaven, VT 83781
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 09:32:37.177
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Administrator
	distinguishedName=CN=Administrator,CN=Users,DC=allports,DC=local
	cn=Administrator
Object Details:
	sAMAccountType=805306368
	sAMAccountName=Administrator
	logonCount=1
	accountExpires=0
	objectSid=S-1-5-21-3169561533-3046981224-3775061561-500
	primaryGroupID=513
	pwdLastSet=09:09.35 AM, Wed 11/05/2025
	lastLogon=12:47.08 PM, Tue 06/21/2022
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=70d895d0-95d7-4db4-a66b-5096a1474671
	whenChanged=09:32.37 AM, Wed 11/05/2025
	whenCreated=09:16.20 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30028
	uSNCreated=8196
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141726.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	adminCount=1
	logonHours=<binary>
	memberOf=CN=Group Policy Creator Owners,CN=Users,DC=allports,DC=local|CN=Domain Admins,CN=Users,DC=allports,DC=local|CN=Enterprise Admins,CN=Users,DC=allports,DC=local|CN=Schema Admins,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	description=Built-in account for administering the computer/domain


_raw:
11/05/2025 09:32:37.177
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Ethan Fisher
	distinguishedName=CN=Ethan Fisher,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Ethan
	sn=Fisher
	cn=Ethan Fisher
Object Details:
	sAMAccountType=805306368
	sAMAccountName=efisher
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3169561533-3046981224-3775061561-1618
	primaryGroupID=513
	pwdLastSet=09:20.26 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=510c84c8-f647-419b-beea-5b4ee571d142
	whenChanged=09:32.37 AM, Wed 11/05/2025
	whenCreated=09:20.26 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30026
	uSNCreated=15882
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=79800 Bruce Vista, Hortonberg, HI 64197
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 09:32:37.162
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=David Carter
	distinguishedName=CN=David Carter,OU=Executive,OU=Departments,DC=allports,DC=local
	givenName=David
	sn=Carter
	cn=David Carter
Object Details:
	sAMAccountType=805306368
	sAMAccountName=dcarter
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3169561533-3046981224-3775061561-3329
	primaryGroupID=513
	pwdLastSet=09:22.09 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=558699b3-aa42-4689-858d-fe7455961d8c
	whenChanged=09:32.37 AM, Wed 11/05/2025
	whenCreated=09:22.09 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30024
	uSNCreated=26187
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=80034 Stark Walks Apt. 756, Mcdanielberg, WY 73366
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Co-Founder & CEO


_raw:
11/05/2025 09:32:37.162
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Schema Admins
	distinguishedName=CN=Schema Admins,CN=Users,DC=allports,DC=local
	cn=Schema Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Schema Admins
	objectSid=S-1-5-21-3169561533-3046981224-3775061561-518
	objectGUID=ef0d39a9-f2ef-4730-b643-ef351a9ac413
	whenChanged=09:32.37 AM, Wed 11/05/2025
	whenCreated=09:17.26 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30022
	uSNCreated=12336
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141726.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483640
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local
	member=CN=Administrator,CN=Users,DC=allports,DC=local
	description=Designated administrators of the schema