_raw:
11/05/2025 12:22:44.399
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Alessia Ross
	distinguishedName=CN=Alessia Ross,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Alessia
	sn=Ross
	cn=Alessia Ross
Object Details:
	sAMAccountType=805306368
	sAMAccountName=aross1
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-121956683-2452876741-1476912886-1969
	primaryGroupID=513
	pwdLastSet=12:10.57 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=7146f964-f6fa-49ea-a593-f8ebe65ddff3
	whenChanged=12:22.44 PM, Wed 11/05/2025
	whenCreated=12:10.57 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30013
	uSNCreated=17989
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=4994 Kathleen Overpass Apt. 818, Port Larryborough, ND 84763
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 12:22:44.367
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Logan Clark
	distinguishedName=CN=Logan Clark,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Logan
	sn=Clark
	cn=Logan Clark
Object Details:
	sAMAccountType=805306368
	sAMAccountName=lclark1
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-121956683-2452876741-1476912886-3910
	primaryGroupID=513
	pwdLastSet=12:13.06 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=f7909f41-32ac-44ae-9d5b-40eb3027c2e9
	whenChanged=12:22.44 PM, Wed 11/05/2025
	whenCreated=12:13.06 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30011
	uSNCreated=29702
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=29325 Rebecca Estate, Lake Ronald, CO 85102
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer

_sourcetype: ActiveDirectory

source: ActiveDirectory

sourcetype: ActiveDirectory


_raw:
11/05/2025 12:22:44.367
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Schema Admins
	distinguishedName=CN=Schema Admins,CN=Users,DC=allports,DC=local
	cn=Schema Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Schema Admins
	objectSid=S-1-5-21-121956683-2452876741-1476912886-518
	objectGUID=bb051938-a8d6-4e37-88dd-3a07eeb768cf
	whenChanged=12:22.44 PM, Wed 11/05/2025
	whenCreated=12:07.33 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30009
	uSNCreated=12336
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170734.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483640
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local
	member=CN=Administrator,CN=Users,DC=allports,DC=local
	description=Designated administrators of the schema


_raw:
11/05/2025 12:22:44.367
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Erick Smith
	distinguishedName=CN=Erick Smith,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Erick
	sn=Smith
	cn=Erick Smith
Object Details:
	sAMAccountType=805306368
	sAMAccountName=esmith
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-121956683-2452876741-1476912886-1182
	primaryGroupID=513
	pwdLastSet=12:10.06 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=d4155533-f1ee-4f21-9693-904d24764bc8
	whenChanged=12:22.44 PM, Wed 11/05/2025
	whenCreated=12:10.06 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30008
	uSNCreated=13247
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=569 Carrie Route Apt. 586, Lake James, NV 94321
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 12:22:44.367
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Eleanor Moore
	distinguishedName=CN=Eleanor Moore,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Eleanor
	sn=Moore
	cn=Eleanor Moore
Object Details:
	sAMAccountType=805306368
	sAMAccountName=emoore
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-121956683-2452876741-1476912886-3816
	primaryGroupID=513
	pwdLastSet=12:12.59 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=a6a76331-8049-4903-9161-aa845746f808
	whenChanged=12:22.44 PM, Wed 11/05/2025
	whenCreated=12:12.59 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30006
	uSNCreated=29133
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=212 James Vista, Porterport, NH 76563
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 12:22:44.367
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=cloudbase-init
	displayName=cloudbase-init
	distinguishedName=CN=cloudbase-init,CN=Users,DC=allports,DC=local
	cn=cloudbase-init
Object Details:
	sAMAccountType=805306368
	sAMAccountName=cloudbase-init
	logonCount=5
	accountExpires=Never Expires
	objectSid=S-1-5-21-121956683-2452876741-1476912886-1000
	primaryGroupID=513
	pwdLastSet=11:57.25 AM, Wed 11/05/2025
	lastLogon=12:08.13 PM, Wed 11/05/2025
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=66048
	objectGUID=e23f6327-142f-4506-aed2-a96a613e9deb
	whenChanged=12:22.44 PM, Wed 11/05/2025
	whenCreated=12:06.24 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30004
	uSNCreated=8198
	instanceType=4
Additional Details:
	lastLogonTimestamp=12:08.13 PM, Wed 11/05/2025
	dSCorePropagationData=20251105170734.0Z|16010101000001.0Z
	adminCount=1
	memberOf=CN=Administrators,CN=Builtin,DC=allports,DC=local


_raw:
11/05/2025 12:22:44.367
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Admin
	displayName=Admin
	distinguishedName=CN=Admin,CN=Users,DC=allports,DC=local
	cn=Admin
Object Details:
	sAMAccountType=805306368
	sAMAccountName=Admin
	logonCount=1
	accountExpires=Never Expires
	objectSid=S-1-5-21-121956683-2452876741-1476912886-1001
	primaryGroupID=513
	pwdLastSet=11:55.54 AM, Wed 11/05/2025
	lastLogon=11:55.05 AM, Wed 11/05/2025
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=66048
	objectGUID=fce6e023-6a1c-4231-8e9f-42938dcb44ca
	whenChanged=12:22.44 PM, Wed 11/05/2025
	whenCreated=12:06.24 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30002
	uSNCreated=8199
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170734.0Z|16010101000001.0Z
	adminCount=1
	memberOf=CN=Administrators,CN=Builtin,DC=allports,DC=local


_raw:
11/05/2025 12:22:44.367
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Enterprise Admins
	distinguishedName=CN=Enterprise Admins,CN=Users,DC=allports,DC=local
	cn=Enterprise Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Enterprise Admins
	objectSid=S-1-5-21-121956683-2452876741-1476912886-519
	objectGUID=a6fa1b16-e973-4a43-9235-438a69b32e66
	whenChanged=12:22.44 PM, Wed 11/05/2025
	whenCreated=12:07.33 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30000
	uSNCreated=12339
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170734.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483640
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	member=CN=Administrator,CN=Users,DC=allports,DC=local
	description=Designated administrators of the enterprise


_raw:
11/05/2025 12:22:44.367
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Penelope Brooks
	distinguishedName=CN=Penelope Brooks,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Penelope
	sn=Brooks
	cn=Penelope Brooks
Object Details:
	sAMAccountType=805306368
	sAMAccountName=pbrooks
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-121956683-2452876741-1476912886-2375
	primaryGroupID=513
	pwdLastSet=12:11.24 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=bc26030c-482f-4f1b-a6e4-cf6e8e335f4e
	whenChanged=12:22.44 PM, Wed 11/05/2025
	whenCreated=12:11.24 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=29999
	uSNCreated=20441
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=373 Dickson Pike, Darrenstad, VA 06979
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 12:22:44.352
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=David Carter
	distinguishedName=CN=David Carter,OU=Executive,OU=Departments,DC=allports,DC=local
	givenName=David
	sn=Carter
	cn=David Carter
Object Details:
	sAMAccountType=805306368
	sAMAccountName=dcarter
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-121956683-2452876741-1476912886-3181
	primaryGroupID=513
	pwdLastSet=12:12.18 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=5df28205-b8e0-4fd8-a40a-449f305d098b
	whenChanged=12:22.44 PM, Wed 11/05/2025
	whenCreated=12:12.18 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=29997
	uSNCreated=25300
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=80034 Stark Walks Apt. 756, Mcdanielberg, WY 73366
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Co-Founder & CEO


_raw:
11/05/2025 12:22:44.352
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Sarah Hill
	distinguishedName=CN=Sarah Hill,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Sarah
	sn=Hill
	cn=Sarah Hill
Object Details:
	sAMAccountType=805306368
	sAMAccountName=shill
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-121956683-2452876741-1476912886-1829
	primaryGroupID=513
	pwdLastSet=12:10.48 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=ee071f05-7f5b-4ecc-bfee-aff95faa1b3f
	whenChanged=12:22.44 PM, Wed 11/05/2025
	whenCreated=12:10.48 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=29995
	uSNCreated=17141
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=837 Wolfe Street, Mitchellhaven, VT 83781
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 12:22:44.336
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Key Admins
	distinguishedName=CN=Key Admins,CN=Users,DC=allports,DC=local
	cn=Key Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Key Admins
	objectSid=S-1-5-21-121956683-2452876741-1476912886-526
	objectGUID=16d0f504-953a-491d-a7cf-0a705999238f
	whenChanged=12:22.44 PM, Wed 11/05/2025
	whenCreated=12:07.33 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=29993
	uSNCreated=12450
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170734.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483646
	adminCount=1
	description=Members of this group can perform administrative actions on key objects within the domain.


_raw:
11/05/2025 12:22:44.258
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Container,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=AdminSDHolder
	distinguishedName=CN=AdminSDHolder,CN=System,DC=allports,DC=local
	cn=AdminSDHolder
Object Details:
	objectGUID=5221b925-ef90-4761-90d3-f4d81ef10026
	whenChanged=12:22.44 PM, Wed 11/05/2025
	whenCreated=12:06.24 PM, Wed 11/05/2025
	objectClass=top|container
Event Details:
	uSNChanged=29992
	uSNCreated=5704
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170734.0Z|16010101000000.0Z
	isCriticalSystemObject=TRUE
	systemFlags=-1946157056
	showInAdvancedViewOnly=TRUE


_raw:
11/05/2025 12:22:38.442
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Domain Controllers
	distinguishedName=CN=Domain Controllers,CN=Users,DC=allports,DC=local
	cn=Domain Controllers
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Domain Controllers
	objectSid=S-1-5-21-2631744195-3508082672-3485542705-516
	objectGUID=b7cd099f-4f44-4ef3-b448-833cf2dde8a6
	whenChanged=12:22.38 PM, Wed 11/05/2025
	whenCreated=12:07.26 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30057
	uSNCreated=12333
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170726.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483646
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local
	description=All domain controllers in the domain


_raw:
11/05/2025 12:22:38.427
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Read-only Domain Controllers
	distinguishedName=CN=Read-only Domain Controllers,CN=Users,DC=allports,DC=local
	cn=Read-only Domain Controllers
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Read-only Domain Controllers
	objectSid=S-1-5-21-2631744195-3508082672-3485542705-521
	objectGUID=37cb5402-2640-48a0-a7fa-852bbf0e49d3
	whenChanged=12:22.38 PM, Wed 11/05/2025
	whenCreated=12:07.26 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30056
	uSNCreated=12419
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170726.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483646
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local
	description=Members of this group are Read-Only Domain Controllers in the domain


_raw:
11/05/2025 12:22:38.380
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=krbtgt
	distinguishedName=CN=krbtgt,CN=Users,DC=allports,DC=local
	cn=krbtgt
Object Details:
	sAMAccountType=805306368
	sAMAccountName=krbtgt
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2631744195-3508082672-3485542705-502
	primaryGroupID=513
	pwdLastSet=12:07.26 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=514
	objectGUID=5ec3fc8f-2477-4ea0-96e2-bc46105dc909
	whenChanged=12:22.38 PM, Wed 11/05/2025
	whenCreated=12:07.26 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30054
	uSNCreated=12324
	instanceType=4
Additional Details:
	msDS-SupportedEncryptionTypes=0
	dSCorePropagationData=20251105170726.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	servicePrincipalName=kadmin/changepw
	adminCount=1
	showInAdvancedViewOnly=TRUE
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local
	description=Key Distribution Center Service Account


_raw:
11/05/2025 12:22:38.364
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Administrators
	distinguishedName=CN=Administrators,CN=Builtin,DC=allports,DC=local
	cn=Administrators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Administrators
	objectSid=S-1-5-32-544
	objectGUID=80dcc97f-2509-4292-84ee-f8f2b529f669
	whenChanged=12:22.38 PM, Wed 11/05/2025
	whenCreated=12:06.14 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30053
	uSNCreated=8201
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170726.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	member=CN=Domain Admins,CN=Users,DC=allports,DC=local|CN=Enterprise Admins,CN=Users,DC=allports,DC=local|CN=Admin,CN=Users,DC=allports,DC=local|CN=cloudbase-init,CN=Users,DC=allports,DC=local|CN=Administrator,CN=Users,DC=allports,DC=local
	description=Administrators have complete and unrestricted access to the computer/domain


_raw:
11/05/2025 12:22:38.348
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Print Operators
	distinguishedName=CN=Print Operators,CN=Builtin,DC=allports,DC=local
	cn=Print Operators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Print Operators
	objectSid=S-1-5-32-550
	objectGUID=3030466a-ae9c-42b7-bbf4-61738daaa291
	whenChanged=12:22.38 PM, Wed 11/05/2025
	whenCreated=12:06.14 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30051
	uSNCreated=8215
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170726.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Members can administer printers installed on domain controllers


_raw:
11/05/2025 12:22:38.333
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Backup Operators
	distinguishedName=CN=Backup Operators,CN=Builtin,DC=allports,DC=local
	cn=Backup Operators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Backup Operators
	objectSid=S-1-5-32-551
	objectGUID=331ed75d-7d0c-44cc-9567-cc3dd5d769d9
	whenChanged=12:22.38 PM, Wed 11/05/2025
	whenCreated=12:06.14 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30049
	uSNCreated=8216
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170726.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Backup Operators can override security restrictions for the sole purpose of backing up or restoring files


_raw:
11/05/2025 12:22:38.317
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Account Operators
	distinguishedName=CN=Account Operators,CN=Builtin,DC=allports,DC=local
	cn=Account Operators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Account Operators
	objectSid=S-1-5-32-548
	objectGUID=c63e5631-9198-4738-ad29-03351d34ea0f
	whenChanged=12:22.38 PM, Wed 11/05/2025
	whenCreated=12:07.26 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30047
	uSNCreated=12363
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170726.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Members can administer domain user and group accounts


_raw:
11/05/2025 12:22:38.301
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Replicator
	distinguishedName=CN=Replicator,CN=Builtin,DC=allports,DC=local
	cn=Replicator
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Replicator
	objectSid=S-1-5-32-552
	objectGUID=45945a19-2f59-4384-a8c9-ad6ccd31a949
	whenChanged=12:22.38 PM, Wed 11/05/2025
	whenCreated=12:06.14 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30046
	uSNCreated=8217
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170726.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Supports file replication in a domain


_raw:
11/05/2025 12:22:38.301
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Server Operators
	distinguishedName=CN=Server Operators,CN=Builtin,DC=allports,DC=local
	cn=Server Operators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Server Operators
	objectSid=S-1-5-32-549
	objectGUID=e421a10a-1a4c-49fc-b56e-f7d7de26d7c6
	whenChanged=12:22.38 PM, Wed 11/05/2025
	whenCreated=12:07.26 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30044
	uSNCreated=12360
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170726.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Members can administer domain servers


_raw:
11/05/2025 12:22:38.301
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Isabella Clark
	distinguishedName=CN=Isabella Clark,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Isabella
	sn=Clark
	cn=Isabella Clark
Object Details:
	sAMAccountType=805306368
	sAMAccountName=iclark1
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2631744195-3508082672-3485542705-3351
	primaryGroupID=513
	pwdLastSet=12:12.17 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=bf12e8eb-2610-49d0-afe0-fc886d4f9fb8
	whenChanged=12:22.38 PM, Wed 11/05/2025
	whenCreated=12:12.17 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30043
	uSNCreated=26327
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=8686 Rachel Fords, Port Jason, NE 94930
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 12:22:38.287
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Enterprise Key Admins
	distinguishedName=CN=Enterprise Key Admins,CN=Users,DC=allports,DC=local
	cn=Enterprise Key Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Enterprise Key Admins
	objectSid=S-1-5-21-2631744195-3508082672-3485542705-527
	objectGUID=92d922eb-05fa-449f-937f-c137622e373b
	whenChanged=12:22.38 PM, Wed 11/05/2025
	whenCreated=12:07.26 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30041
	uSNCreated=12453
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170726.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483640
	adminCount=1
	description=Members of this group can perform administrative actions on key objects within the forest.


_raw:
11/05/2025 12:22:38.269
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=cloudbase-init
	displayName=cloudbase-init
	distinguishedName=CN=cloudbase-init,CN=Users,DC=allports,DC=local
	cn=cloudbase-init
Object Details:
	sAMAccountType=805306368
	sAMAccountName=cloudbase-init
	logonCount=5
	accountExpires=Never Expires
	objectSid=S-1-5-21-2631744195-3508082672-3485542705-1000
	primaryGroupID=513
	pwdLastSet=11:56.23 AM, Wed 11/05/2025
	lastLogon=12:08.06 PM, Wed 11/05/2025
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=66048
	objectGUID=824974e4-29d0-4ba7-9355-5b15f2ddec7d
	whenChanged=12:22.38 PM, Wed 11/05/2025
	whenCreated=12:06.14 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30040
	uSNCreated=8198
	instanceType=4
Additional Details:
	lastLogonTimestamp=12:08.06 PM, Wed 11/05/2025
	dSCorePropagationData=20251105170726.0Z|16010101000001.0Z
	adminCount=1
	memberOf=CN=Administrators,CN=Builtin,DC=allports,DC=local


_raw:
11/05/2025 12:22:38.269
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Ethan Fisher
	distinguishedName=CN=Ethan Fisher,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Ethan
	sn=Fisher
	cn=Ethan Fisher
Object Details:
	sAMAccountType=805306368
	sAMAccountName=efisher
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2631744195-3508082672-3485542705-2662
	primaryGroupID=513
	pwdLastSet=12:11.33 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=cb435edb-f2a5-45ea-8f43-d8ada63259aa
	whenChanged=12:22.38 PM, Wed 11/05/2025
	whenCreated=12:11.33 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30038
	uSNCreated=22170
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=79800 Bruce Vista, Hortonberg, HI 64197
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 12:22:38.254
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Domain Admins
	distinguishedName=CN=Domain Admins,CN=Users,DC=allports,DC=local
	cn=Domain Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Domain Admins
	objectSid=S-1-5-21-2631744195-3508082672-3485542705-512
	objectGUID=d7f56ed0-09fd-444d-b7bd-83e8d79ad211
	whenChanged=12:22.38 PM, Wed 11/05/2025
	whenCreated=12:07.26 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30036
	uSNCreated=12345
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170726.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483646
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	member=CN=Logan Clark,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Eleanor Moore,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Isabella Clark,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=James Porter,OU=Executive,OU=Departments,DC=allports,DC=local|CN=Josie Young,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=David Carter,OU=Executive,OU=Departments,DC=allports,DC=local|CN=Bailey Finn,OU=Administration,OU=Departments,DC=allports,DC=local|CN=Kevin Miller,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Linda Vega,OU=Executive,OU=Departments,DC=allports,DC=local|CN=Ethan Fisher,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Michael Rivera,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Emily Carter,OU=Executive,OU=Departments,DC=allports,DC=local|CN=Penelope Brooks,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Kai Hill,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=John Taylor,OU=Executive,OU=Departments,DC=allports,DC=local|CN=Axel White,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Alessia Ross,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Nora Nelson,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Sarah Hill,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Olivia Collins,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Erick Smith,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Administrator,CN=Users,DC=allports,DC=local
	description=Designated administrators of the domain


_raw:
11/05/2025 12:22:38.254
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Eleanor Moore
	distinguishedName=CN=Eleanor Moore,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Eleanor
	sn=Moore
	cn=Eleanor Moore
Object Details:
	sAMAccountType=805306368
	sAMAccountName=emoore
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2631744195-3508082672-3485542705-3816
	primaryGroupID=513
	pwdLastSet=12:12.47 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=663c36cf-9640-4777-9ba7-f9b309ce9130
	whenChanged=12:22.38 PM, Wed 11/05/2025
	whenCreated=12:12.47 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30035
	uSNCreated=29131
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=212 James Vista, Porterport, NH 76563
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 12:22:38.223
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=John Taylor
	distinguishedName=CN=John Taylor,OU=Executive,OU=Departments,DC=allports,DC=local
	givenName=John
	sn=Taylor
	cn=John Taylor
Object Details:
	sAMAccountType=805306368
	sAMAccountName=jtaylor
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2631744195-3508082672-3485542705-2045
	primaryGroupID=513
	pwdLastSet=12:10.54 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=09f4d2c5-2b4b-4ad2-82b3-6723c609aba1
	whenChanged=12:22.38 PM, Wed 11/05/2025
	whenCreated=12:10.54 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30033
	uSNCreated=18451
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=80159 Rebekah Tunnel, Kevinmouth, NY 57903
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=CISO


_raw:
11/05/2025 12:22:38.223
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Emily Carter
	distinguishedName=CN=Emily Carter,OU=Executive,OU=Departments,DC=allports,DC=local
	givenName=Emily
	sn=Carter
	cn=Emily Carter
Object Details:
	sAMAccountType=805306368
	sAMAccountName=ecarter
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2631744195-3508082672-3485542705-2604
	primaryGroupID=513
	pwdLastSet=12:11.29 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=9a0a9bab-ec3a-40a6-96df-ec57f6464b2a
	whenChanged=12:22.38 PM, Wed 11/05/2025
	whenCreated=12:11.29 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30031
	uSNCreated=21816
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=5325 Rogers Village, Lydiaport, KY 37558
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Co-Founder & COO


_raw:
11/05/2025 12:22:38.223
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Administrator
	distinguishedName=CN=Administrator,CN=Users,DC=allports,DC=local
	cn=Administrator
Object Details:
	sAMAccountType=805306368
	sAMAccountName=Administrator
	logonCount=1
	accountExpires=0
	objectSid=S-1-5-21-2631744195-3508082672-3485542705-500
	primaryGroupID=513
	pwdLastSet=11:58.35 AM, Wed 11/05/2025
	lastLogon=12:47.08 PM, Tue 06/21/2022
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=0c60e5a8-7746-462c-901b-db68608df768
	whenChanged=12:22.38 PM, Wed 11/05/2025
	whenCreated=12:06.14 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30029
	uSNCreated=8196
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170726.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	adminCount=1
	logonHours=<binary>
	memberOf=CN=Group Policy Creator Owners,CN=Users,DC=allports,DC=local|CN=Domain Admins,CN=Users,DC=allports,DC=local|CN=Enterprise Admins,CN=Users,DC=allports,DC=local|CN=Schema Admins,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	description=Built-in account for administering the computer/domain


_raw:
11/05/2025 12:22:38.207
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Michael Rivera
	distinguishedName=CN=Michael Rivera,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Michael
	sn=Rivera
	cn=Michael Rivera
Object Details:
	sAMAccountType=805306368
	sAMAccountName=mrivera1
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2631744195-3508082672-3485542705-2647
	primaryGroupID=513
	pwdLastSet=12:11.32 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=495fc89b-40ae-4669-aad6-061751794808
	whenChanged=12:22.38 PM, Wed 11/05/2025
	whenCreated=12:11.32 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30027
	uSNCreated=22077
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=11949 Gray Meadows Apt. 897, Lindseyberg, NV 06447
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 12:22:38.207
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Key Admins
	distinguishedName=CN=Key Admins,CN=Users,DC=allports,DC=local
	cn=Key Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Key Admins
	objectSid=S-1-5-21-2631744195-3508082672-3485542705-526
	objectGUID=6165a68b-5e4f-473c-b18d-28f2202cd1af
	whenChanged=12:22.38 PM, Wed 11/05/2025
	whenCreated=12:07.26 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30025
	uSNCreated=12450
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105172238.0Z|20251105170726.0Z|16010101000416.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483646
	adminCount=1
	description=Members of this group can perform administrative actions on key objects within the domain.


_raw:
11/05/2025 12:22:38.207
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Logan Clark
	distinguishedName=CN=Logan Clark,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Logan
	sn=Clark
	cn=Logan Clark
Object Details:
	sAMAccountType=805306368
	sAMAccountName=lclark1
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2631744195-3508082672-3485542705-3910
	primaryGroupID=513
	pwdLastSet=12:12.53 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=8cc6a685-303c-4cca-b6c4-d6a72e426c79
	whenChanged=12:22.38 PM, Wed 11/05/2025
	whenCreated=12:12.53 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30024
	uSNCreated=29700
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=29325 Rebecca Estate, Lake Ronald, CO 85102
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 12:22:38.191
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Alessia Ross
	distinguishedName=CN=Alessia Ross,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Alessia
	sn=Ross
	cn=Alessia Ross
Object Details:
	sAMAccountType=805306368
	sAMAccountName=aross1
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2631744195-3508082672-3485542705-1969
	primaryGroupID=513
	pwdLastSet=12:10.49 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=f32e2384-c121-4590-bea9-7a28fcd88784
	whenChanged=12:22.38 PM, Wed 11/05/2025
	whenCreated=12:10.49 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30022
	uSNCreated=17987
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=4994 Kathleen Overpass Apt. 818, Port Larryborough, ND 84763
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 12:22:38.175
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Enterprise Admins
	distinguishedName=CN=Enterprise Admins,CN=Users,DC=allports,DC=local
	cn=Enterprise Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Enterprise Admins
	objectSid=S-1-5-21-2631744195-3508082672-3485542705-519
	objectGUID=facc0b7a-742d-46ec-bbfd-93052de538f2
	whenChanged=12:22.38 PM, Wed 11/05/2025
	whenCreated=12:07.26 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30020
	uSNCreated=12339
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170726.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483640
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	member=CN=Administrator,CN=Users,DC=allports,DC=local
	description=Designated administrators of the enterprise


_raw:
11/05/2025 12:22:38.160
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Kevin Miller
	distinguishedName=CN=Kevin Miller,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Kevin
	sn=Miller
	cn=Kevin Miller
Object Details:
	sAMAccountType=805306368
	sAMAccountName=kmiller
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2631744195-3508082672-3485542705-3073
	primaryGroupID=513
	pwdLastSet=12:11.58 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=64252271-4d24-4962-bfc3-2a278f6b96c0
	whenChanged=12:22.38 PM, Wed 11/05/2025
	whenCreated=12:11.58 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30019
	uSNCreated=24644
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=041 Ronnie Branch, Oconnellfort, WV 97644
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 12:22:38.160
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Axel White
	distinguishedName=CN=Axel White,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Axel
	sn=White
	cn=Axel White
Object Details:
	sAMAccountType=805306368
	sAMAccountName=awhite1
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2631744195-3508082672-3485542705-1985
	primaryGroupID=513
	pwdLastSet=12:10.50 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=51950e62-f054-4daa-bb77-f8965efa0d79
	whenChanged=12:22.38 PM, Wed 11/05/2025
	whenCreated=12:10.50 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30017
	uSNCreated=18086
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=2130 David Mount, West Meganland, AZ 73217
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 12:22:38.145
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Sarah Hill
	distinguishedName=CN=Sarah Hill,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Sarah
	sn=Hill
	cn=Sarah Hill
Object Details:
	sAMAccountType=805306368
	sAMAccountName=shill
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2631744195-3508082672-3485542705-1829
	primaryGroupID=513
	pwdLastSet=12:10.41 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=9a3b8660-23c6-42db-a5c0-8b0b73f6c77f
	whenChanged=12:22.38 PM, Wed 11/05/2025
	whenCreated=12:10.41 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30015
	uSNCreated=17139
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=837 Wolfe Street, Mitchellhaven, VT 83781
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 12:22:38.082
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Schema Admins
	distinguishedName=CN=Schema Admins,CN=Users,DC=allports,DC=local
	cn=Schema Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Schema Admins
	objectSid=S-1-5-21-2631744195-3508082672-3485542705-518
	objectGUID=d22aa24f-7975-433a-9a69-dfbb46087152
	whenChanged=12:22.38 PM, Wed 11/05/2025
	whenCreated=12:07.26 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30013
	uSNCreated=12336
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105172238.0Z|20251105170726.0Z|16010101000416.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483640
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local
	member=CN=Administrator,CN=Users,DC=allports,DC=local
	description=Designated administrators of the schema


_raw:
11/05/2025 12:22:38.066
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Linda Vega
	distinguishedName=CN=Linda Vega,OU=Executive,OU=Departments,DC=allports,DC=local
	givenName=Linda
	sn=Vega
	cn=Linda Vega
Object Details:
	sAMAccountType=805306368
	sAMAccountName=lvega
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2631744195-3508082672-3485542705-2760
	primaryGroupID=513
	pwdLastSet=12:11.39 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=2ed4fb49-5e20-4f29-ac78-fa66f76554f8
	whenChanged=12:22.38 PM, Wed 11/05/2025
	whenCreated=12:11.39 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30012
	uSNCreated=22761
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=36745 Smith Drive, Grantberg, NJ 17682
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=CIO


_raw:
11/05/2025 12:22:38.050
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Josie Young
	distinguishedName=CN=Josie Young,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Josie
	sn=Young
	cn=Josie Young
Object Details:
	sAMAccountType=805306368
	sAMAccountName=jyoung
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2631744195-3508082672-3485542705-3280
	primaryGroupID=513
	pwdLastSet=12:12.12 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=bacf9e44-3dc2-4abf-90dc-a2175fd5688f
	whenChanged=12:22.38 PM, Wed 11/05/2025
	whenCreated=12:12.12 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30010
	uSNCreated=25895
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=49085 Tucker Circles Suite 272, Novakborough, RI 93174
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 12:22:38.005
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=James Porter
	distinguishedName=CN=James Porter,OU=Executive,OU=Departments,DC=allports,DC=local
	givenName=James
	sn=Porter
	cn=James Porter
Object Details:
	sAMAccountType=805306368
	sAMAccountName=jporter
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2631744195-3508082672-3485542705-3332
	primaryGroupID=513
	pwdLastSet=12:12.15 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=7808633d-04ac-4916-acc7-b22a231217ce
	whenChanged=12:22.37 PM, Wed 11/05/2025
	whenCreated=12:12.15 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30008
	uSNCreated=26210
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=25652 Desiree Forge, West Juliefurt, OR 59085
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=CFO


_raw:
11/05/2025 12:22:37.992
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Erick Smith
	distinguishedName=CN=Erick Smith,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Erick
	sn=Smith
	cn=Erick Smith
Object Details:
	sAMAccountType=805306368
	sAMAccountName=esmith
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2631744195-3508082672-3485542705-1182
	primaryGroupID=513
	pwdLastSet=12:09.59 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=b587a735-c2fe-4de5-8304-5d7880587b51
	whenChanged=12:22.37 PM, Wed 11/05/2025
	whenCreated=12:09.59 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30006
	uSNCreated=13245
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=569 Carrie Route Apt. 586, Lake James, NV 94321
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 12:22:37.992
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Olivia Collins
	distinguishedName=CN=Olivia Collins,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Olivia
	sn=Collins
	cn=Olivia Collins
Object Details:
	sAMAccountType=805306368
	sAMAccountName=ocollins
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2631744195-3508082672-3485542705-1430
	primaryGroupID=513
	pwdLastSet=12:10.15 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=ae651632-12d8-46f8-b47c-5e7fe1ac2582
	whenChanged=12:22.37 PM, Wed 11/05/2025
	whenCreated=12:10.15 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30004
	uSNCreated=14742
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=24735 Webster Locks, North Jonathanton, MD 97223
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 12:22:37.972
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Bailey Finn
	distinguishedName=CN=Bailey Finn,OU=Administration,OU=Departments,DC=allports,DC=local
	givenName=Bailey
	sn=Finn
	cn=Bailey Finn
Object Details:
	sAMAccountType=805306368
	sAMAccountName=bfinn
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2631744195-3508082672-3485542705-3116
	primaryGroupID=513
	pwdLastSet=12:12.01 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=fe56a51e-91e2-42a0-88ca-80523cc2eea2
	whenChanged=12:22.37 PM, Wed 11/05/2025
	whenCreated=12:12.01 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30002
	uSNCreated=24905
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=USNS Jackson, FPO AP 90789
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Director of Technical Services


_raw:
11/05/2025 12:22:37.957
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=David Carter
	distinguishedName=CN=David Carter,OU=Executive,OU=Departments,DC=allports,DC=local
	givenName=David
	sn=Carter
	cn=David Carter
Object Details:
	sAMAccountType=805306368
	sAMAccountName=dcarter
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2631744195-3508082672-3485542705-3181
	primaryGroupID=513
	pwdLastSet=12:12.05 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=17743a15-0f8d-4c1e-872b-fc821528f0ac
	whenChanged=12:22.37 PM, Wed 11/05/2025
	whenCreated=12:12.05 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30000
	uSNCreated=25298
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=80034 Stark Walks Apt. 756, Mcdanielberg, WY 73366
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Co-Founder & CEO


_raw:
11/05/2025 12:22:37.957
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Admin
	displayName=Admin
	distinguishedName=CN=Admin,CN=Users,DC=allports,DC=local
	cn=Admin
Object Details:
	sAMAccountType=805306368
	sAMAccountName=Admin
	logonCount=1
	accountExpires=Never Expires
	objectSid=S-1-5-21-2631744195-3508082672-3485542705-1001
	primaryGroupID=513
	pwdLastSet=11:54.48 AM, Wed 11/05/2025
	lastLogon=11:53.54 AM, Wed 11/05/2025
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=66048
	objectGUID=1c9abd12-b025-4b19-9465-71fa95b00819
	whenChanged=12:22.37 PM, Wed 11/05/2025
	whenCreated=12:06.14 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=29998
	uSNCreated=8199
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170726.0Z|16010101000001.0Z
	adminCount=1
	memberOf=CN=Administrators,CN=Builtin,DC=allports,DC=local


_raw:
11/05/2025 12:22:37.957
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Kai Hill
	distinguishedName=CN=Kai Hill,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Kai
	sn=Hill
	cn=Kai Hill
Object Details:
	sAMAccountType=805306368
	sAMAccountName=khill
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2631744195-3508082672-3485542705-2142
	primaryGroupID=513
	pwdLastSet=12:11.00 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=9b7b960c-4552-4f20-8103-e9e1b6ada72c
	whenChanged=12:22.37 PM, Wed 11/05/2025
	whenCreated=12:11.00 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=29996
	uSNCreated=19036
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=20294 Fletcher Turnpike, Fostertown, DE 39758
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 12:22:37.957
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Nora Nelson
	distinguishedName=CN=Nora Nelson,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Nora
	sn=Nelson
	cn=Nora Nelson
Object Details:
	sAMAccountType=805306368
	sAMAccountName=nnelson
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2631744195-3508082672-3485542705-1850
	primaryGroupID=513
	pwdLastSet=12:10.42 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=c6f83c06-391e-4eb3-acf6-31ee23b5c2d5
	whenChanged=12:22.37 PM, Wed 11/05/2025
	whenCreated=12:10.42 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=29994
	uSNCreated=17268
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=886 Alexander Ridges Suite 360, West William, OK 83863
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 12:22:37.941
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Penelope Brooks
	distinguishedName=CN=Penelope Brooks,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Penelope
	sn=Brooks
	cn=Penelope Brooks
Object Details:
	sAMAccountType=805306368
	sAMAccountName=pbrooks
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2631744195-3508082672-3485542705-2375
	primaryGroupID=513
	pwdLastSet=12:11.15 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=fc7a6601-4839-4377-a677-d68e0c2340e9
	whenChanged=12:22.37 PM, Wed 11/05/2025
	whenCreated=12:11.15 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=29992
	uSNCreated=20439
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=373 Dickson Pike, Darrenstad, VA 06979
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 12:22:37.862
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Container,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=AdminSDHolder
	distinguishedName=CN=AdminSDHolder,CN=System,DC=allports,DC=local
	cn=AdminSDHolder
Object Details:
	objectGUID=207377a4-5b8a-4e3f-a209-35a5aeabf1ef
	whenChanged=12:22.37 PM, Wed 11/05/2025
	whenCreated=12:06.13 PM, Wed 11/05/2025
	objectClass=top|container
Event Details:
	uSNChanged=29990
	uSNCreated=5704
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170726.0Z|16010101000000.0Z
	isCriticalSystemObject=TRUE
	systemFlags=-1946157056
	showInAdvancedViewOnly=TRUE


_raw:
11/05/2025 12:21:44.469
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Domain Controllers
	distinguishedName=CN=Domain Controllers,CN=Users,DC=allports,DC=local
	cn=Domain Controllers
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Domain Controllers
	objectSid=S-1-5-21-3818379735-837213332-531604769-516
	objectGUID=5d9b49d2-6482-42f2-a242-5bfabf5911b8
	whenChanged=12:21.44 PM, Wed 11/05/2025
	whenCreated=12:06.33 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30057
	uSNCreated=12333
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170633.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483646
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local
	description=All domain controllers in the domain


_raw:
11/05/2025 12:21:44.454
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Read-only Domain Controllers
	distinguishedName=CN=Read-only Domain Controllers,CN=Users,DC=allports,DC=local
	cn=Read-only Domain Controllers
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Read-only Domain Controllers
	objectSid=S-1-5-21-3818379735-837213332-531604769-521
	objectGUID=384b770d-b810-480c-b005-1125fe952425
	whenChanged=12:21.44 PM, Wed 11/05/2025
	whenCreated=12:06.33 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30056
	uSNCreated=12419
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170633.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483646
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local
	description=Members of this group are Read-Only Domain Controllers in the domain


_raw:
11/05/2025 12:21:44.454
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=krbtgt
	distinguishedName=CN=krbtgt,CN=Users,DC=allports,DC=local
	cn=krbtgt
Object Details:
	sAMAccountType=805306368
	sAMAccountName=krbtgt
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3818379735-837213332-531604769-502
	primaryGroupID=513
	pwdLastSet=12:06.33 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=514
	objectGUID=be16f2c7-3313-43b0-a588-fe3718ae8457
	whenChanged=12:21.44 PM, Wed 11/05/2025
	whenCreated=12:06.33 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30055
	uSNCreated=12324
	instanceType=4
Additional Details:
	msDS-SupportedEncryptionTypes=0
	dSCorePropagationData=20251105170633.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	servicePrincipalName=kadmin/changepw
	adminCount=1
	showInAdvancedViewOnly=TRUE
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local
	description=Key Distribution Center Service Account


_raw:
11/05/2025 12:21:44.438
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Replicator
	distinguishedName=CN=Replicator,CN=Builtin,DC=allports,DC=local
	cn=Replicator
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Replicator
	objectSid=S-1-5-32-552
	objectGUID=ffbc459d-d4ab-49f9-a7d3-d1ea5cacf3f2
	whenChanged=12:21.44 PM, Wed 11/05/2025
	whenCreated=12:05.22 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30053
	uSNCreated=8217
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170633.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Supports file replication in a domain


_raw:
11/05/2025 12:21:44.422
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Administrators
	distinguishedName=CN=Administrators,CN=Builtin,DC=allports,DC=local
	cn=Administrators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Administrators
	objectSid=S-1-5-32-544
	objectGUID=36f1047c-fdb0-4682-9e14-a92fb1ea7646
	whenChanged=12:21.44 PM, Wed 11/05/2025
	whenCreated=12:05.22 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30051
	uSNCreated=8201
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170633.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	member=CN=Domain Admins,CN=Users,DC=allports,DC=local|CN=Enterprise Admins,CN=Users,DC=allports,DC=local|CN=Admin,CN=Users,DC=allports,DC=local|CN=cloudbase-init,CN=Users,DC=allports,DC=local|CN=Administrator,CN=Users,DC=allports,DC=local
	description=Administrators have complete and unrestricted access to the computer/domain


_raw:
11/05/2025 12:21:44.422
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Server Operators
	distinguishedName=CN=Server Operators,CN=Builtin,DC=allports,DC=local
	cn=Server Operators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Server Operators
	objectSid=S-1-5-32-549
	objectGUID=235e4560-cfa2-4d89-835e-a51f516e0bb3
	whenChanged=12:21.44 PM, Wed 11/05/2025
	whenCreated=12:06.33 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30049
	uSNCreated=12360
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170633.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Members can administer domain servers


_raw:
11/05/2025 12:21:44.407
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Backup Operators
	distinguishedName=CN=Backup Operators,CN=Builtin,DC=allports,DC=local
	cn=Backup Operators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Backup Operators
	objectSid=S-1-5-32-551
	objectGUID=2b915841-bc8d-4ed7-b64b-075d4261c20c
	whenChanged=12:21.44 PM, Wed 11/05/2025
	whenCreated=12:05.22 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30048
	uSNCreated=8216
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170633.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Backup Operators can override security restrictions for the sole purpose of backing up or restoring files


_raw:
11/05/2025 12:21:44.407
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Account Operators
	distinguishedName=CN=Account Operators,CN=Builtin,DC=allports,DC=local
	cn=Account Operators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Account Operators
	objectSid=S-1-5-32-548
	objectGUID=013bd627-3aca-46e8-89be-64087b25951b
	whenChanged=12:21.44 PM, Wed 11/05/2025
	whenCreated=12:06.33 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30046
	uSNCreated=12363
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170633.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Members can administer domain user and group accounts


_raw:
11/05/2025 12:21:44.407
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Print Operators
	distinguishedName=CN=Print Operators,CN=Builtin,DC=allports,DC=local
	cn=Print Operators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Print Operators
	objectSid=S-1-5-32-550
	objectGUID=248cbc01-fd6e-4cbc-bbb2-cc436125dd41
	whenChanged=12:21.44 PM, Wed 11/05/2025
	whenCreated=12:05.22 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30045
	uSNCreated=8215
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170633.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Members can administer printers installed on domain controllers


_raw:
11/05/2025 12:21:44.391
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Logan Clark
	distinguishedName=CN=Logan Clark,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Logan
	sn=Clark
	cn=Logan Clark
Object Details:
	sAMAccountType=805306368
	sAMAccountName=lclark1
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3818379735-837213332-531604769-3910
	primaryGroupID=513
	pwdLastSet=12:11.57 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=18fe89d7-5378-4681-99e6-4702989827f8
	whenChanged=12:21.44 PM, Wed 11/05/2025
	whenCreated=12:11.57 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30043
	uSNCreated=29700
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=29325 Rebecca Estate, Lake Ronald, CO 85102
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 12:21:44.376
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=cloudbase-init
	displayName=cloudbase-init
	distinguishedName=CN=cloudbase-init,CN=Users,DC=allports,DC=local
	cn=cloudbase-init
Object Details:
	sAMAccountType=805306368
	sAMAccountName=cloudbase-init
	logonCount=5
	accountExpires=Never Expires
	objectSid=S-1-5-21-3818379735-837213332-531604769-1000
	primaryGroupID=513
	pwdLastSet=11:56.42 AM, Wed 11/05/2025
	lastLogon=12:07.13 PM, Wed 11/05/2025
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=66048
	objectGUID=d8eb85ce-eb4d-4c61-9b88-efa506739c95
	whenChanged=12:21.44 PM, Wed 11/05/2025
	whenCreated=12:05.22 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30041
	uSNCreated=8198
	instanceType=4
Additional Details:
	lastLogonTimestamp=12:07.13 PM, Wed 11/05/2025
	dSCorePropagationData=20251105170633.0Z|16010101000001.0Z
	adminCount=1
	memberOf=CN=Administrators,CN=Builtin,DC=allports,DC=local


_raw:
11/05/2025 12:21:44.329
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Josie Young
	distinguishedName=CN=Josie Young,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Josie
	sn=Young
	cn=Josie Young
Object Details:
	sAMAccountType=805306368
	sAMAccountName=jyoung
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3818379735-837213332-531604769-3280
	primaryGroupID=513
	pwdLastSet=12:11.18 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=d4aabdb6-c3ba-49b2-896b-95ab517cb2a6
	whenChanged=12:21.44 PM, Wed 11/05/2025
	whenCreated=12:11.18 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30039
	uSNCreated=25895
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=49085 Tucker Circles Suite 272, Novakborough, RI 93174
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 12:21:44.297
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Erick Smith
	distinguishedName=CN=Erick Smith,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Erick
	sn=Smith
	cn=Erick Smith
Object Details:
	sAMAccountType=805306368
	sAMAccountName=esmith
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3818379735-837213332-531604769-1182
	primaryGroupID=513
	pwdLastSet=12:09.09 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=e72360a9-ef5b-484f-b8f1-e1a0da135a67
	whenChanged=12:21.44 PM, Wed 11/05/2025
	whenCreated=12:09.09 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30037
	uSNCreated=13245
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=569 Carrie Route Apt. 586, Lake James, NV 94321
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 12:21:44.251
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=John Taylor
	distinguishedName=CN=John Taylor,OU=Executive,OU=Departments,DC=allports,DC=local
	givenName=John
	sn=Taylor
	cn=John Taylor
Object Details:
	sAMAccountType=805306368
	sAMAccountName=jtaylor
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3818379735-837213332-531604769-2045
	primaryGroupID=513
	pwdLastSet=12:10.03 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=a7424197-c73f-4039-97ef-c46223fbff40
	whenChanged=12:21.44 PM, Wed 11/05/2025
	whenCreated=12:10.03 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30035
	uSNCreated=18451
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=80159 Rebekah Tunnel, Kevinmouth, NY 57903
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=CISO


_raw:
11/05/2025 12:21:44.204
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Domain Admins
	distinguishedName=CN=Domain Admins,CN=Users,DC=allports,DC=local
	cn=Domain Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Domain Admins
	objectSid=S-1-5-21-3818379735-837213332-531604769-512
	objectGUID=52ae4995-ae86-4a2d-8c83-9d0e31b2b8cc
	whenChanged=12:21.44 PM, Wed 11/05/2025
	whenCreated=12:06.33 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30033
	uSNCreated=12345
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170633.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483646
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	member=CN=Logan Clark,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Eleanor Moore,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Isabella Clark,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=James Porter,OU=Executive,OU=Departments,DC=allports,DC=local|CN=Josie Young,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=David Carter,OU=Executive,OU=Departments,DC=allports,DC=local|CN=Bailey Finn,OU=Administration,OU=Departments,DC=allports,DC=local|CN=Kevin Miller,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Linda Vega,OU=Executive,OU=Departments,DC=allports,DC=local|CN=Ethan Fisher,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Michael Rivera,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Emily Carter,OU=Executive,OU=Departments,DC=allports,DC=local|CN=Penelope Brooks,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Kai Hill,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=John Taylor,OU=Executive,OU=Departments,DC=allports,DC=local|CN=Axel White,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Alessia Ross,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Nora Nelson,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Sarah Hill,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Olivia Collins,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Erick Smith,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Administrator,CN=Users,DC=allports,DC=local
	description=Designated administrators of the domain


_raw:
11/05/2025 12:21:44.172
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Penelope Brooks
	distinguishedName=CN=Penelope Brooks,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Penelope
	sn=Brooks
	cn=Penelope Brooks
Object Details:
	sAMAccountType=805306368
	sAMAccountName=pbrooks
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3818379735-837213332-531604769-2375
	primaryGroupID=513
	pwdLastSet=12:10.23 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=52a3fe93-2806-49a3-8cf4-4ff250c6d86e
	whenChanged=12:21.44 PM, Wed 11/05/2025
	whenCreated=12:10.23 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30032
	uSNCreated=20439
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=373 Dickson Pike, Darrenstad, VA 06979
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 12:21:44.141
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Bailey Finn
	distinguishedName=CN=Bailey Finn,OU=Administration,OU=Departments,DC=allports,DC=local
	givenName=Bailey
	sn=Finn
	cn=Bailey Finn
Object Details:
	sAMAccountType=805306368
	sAMAccountName=bfinn
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3818379735-837213332-531604769-3116
	primaryGroupID=513
	pwdLastSet=12:11.08 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=7dc8c48d-c57a-40e2-81d6-dc5903806ddd
	whenChanged=12:21.44 PM, Wed 11/05/2025
	whenCreated=12:11.08 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30030
	uSNCreated=24905
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=USNS Jackson, FPO AP 90789
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Director of Technical Services


_raw:
11/05/2025 12:21:44.110
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Admin
	displayName=Admin
	distinguishedName=CN=Admin,CN=Users,DC=allports,DC=local
	cn=Admin
Object Details:
	sAMAccountType=805306368
	sAMAccountName=Admin
	logonCount=1
	accountExpires=Never Expires
	objectSid=S-1-5-21-3818379735-837213332-531604769-1001
	primaryGroupID=513
	pwdLastSet=11:55.02 AM, Wed 11/05/2025
	lastLogon=11:54.25 AM, Wed 11/05/2025
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=66048
	objectGUID=6059c389-7c5e-40d8-980c-574cc94242cd
	whenChanged=12:21.44 PM, Wed 11/05/2025
	whenCreated=12:05.22 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30028
	uSNCreated=8199
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170633.0Z|16010101000001.0Z
	adminCount=1
	memberOf=CN=Administrators,CN=Builtin,DC=allports,DC=local


_raw:
11/05/2025 12:21:44.110
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=David Carter
	distinguishedName=CN=David Carter,OU=Executive,OU=Departments,DC=allports,DC=local
	givenName=David
	sn=Carter
	cn=David Carter
Object Details:
	sAMAccountType=805306368
	sAMAccountName=dcarter
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3818379735-837213332-531604769-3181
	primaryGroupID=513
	pwdLastSet=12:11.12 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=42122185-ba73-438e-8175-65257c9ddd3e
	whenChanged=12:21.44 PM, Wed 11/05/2025
	whenCreated=12:11.12 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30026
	uSNCreated=25298
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=80034 Stark Walks Apt. 756, Mcdanielberg, WY 73366
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Co-Founder & CEO


_raw:
11/05/2025 12:21:44.110
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Olivia Collins
	distinguishedName=CN=Olivia Collins,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Olivia
	sn=Collins
	cn=Olivia Collins
Object Details:
	sAMAccountType=805306368
	sAMAccountName=ocollins
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3818379735-837213332-531604769-1430
	primaryGroupID=513
	pwdLastSet=12:09.25 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=72f34e77-e4da-49c2-a86e-c9d645987853
	whenChanged=12:21.44 PM, Wed 11/05/2025
	whenCreated=12:09.25 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30024
	uSNCreated=14742
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=24735 Webster Locks, North Jonathanton, MD 97223
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 12:21:44.079
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Kevin Miller
	distinguishedName=CN=Kevin Miller,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Kevin
	sn=Miller
	cn=Kevin Miller
Object Details:
	sAMAccountType=805306368
	sAMAccountName=kmiller
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3818379735-837213332-531604769-3073
	primaryGroupID=513
	pwdLastSet=12:11.06 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=25bf3772-0347-45a6-a736-073e91a04d71
	whenChanged=12:21.44 PM, Wed 11/05/2025
	whenCreated=12:11.06 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30022
	uSNCreated=24644
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=041 Ronnie Branch, Oconnellfort, WV 97644
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 12:21:44.047
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Linda Vega
	distinguishedName=CN=Linda Vega,OU=Executive,OU=Departments,DC=allports,DC=local
	givenName=Linda
	sn=Vega
	cn=Linda Vega
Object Details:
	sAMAccountType=805306368
	sAMAccountName=lvega
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3818379735-837213332-531604769-2760
	primaryGroupID=513
	pwdLastSet=12:10.47 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=82fb586f-49b8-40d8-9a7d-65f9dff6a75e
	whenChanged=12:21.44 PM, Wed 11/05/2025
	whenCreated=12:10.47 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30020
	uSNCreated=22761
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=36745 Smith Drive, Grantberg, NJ 17682
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=CIO


_raw:
11/05/2025 12:21:44.016
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Key Admins
	distinguishedName=CN=Key Admins,CN=Users,DC=allports,DC=local
	cn=Key Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Key Admins
	objectSid=S-1-5-21-3818379735-837213332-531604769-526
	objectGUID=1e7fc756-b291-4eac-b1ab-0eda8d030433
	whenChanged=12:21.44 PM, Wed 11/05/2025
	whenCreated=12:06.33 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30018
	uSNCreated=12450
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170633.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483646
	adminCount=1
	description=Members of this group can perform administrative actions on key objects within the domain.


_raw:
11/05/2025 12:21:44.001
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Axel White
	distinguishedName=CN=Axel White,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Axel
	sn=White
	cn=Axel White
Object Details:
	sAMAccountType=805306368
	sAMAccountName=awhite1
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3818379735-837213332-531604769-1985
	primaryGroupID=513
	pwdLastSet=12:10.00 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=d4002b55-e0b8-457c-941f-88c2c3250520
	whenChanged=12:21.43 PM, Wed 11/05/2025
	whenCreated=12:10.00 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30017
	uSNCreated=18086
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=2130 David Mount, West Meganland, AZ 73217
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 12:21:43.969
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Isabella Clark
	distinguishedName=CN=Isabella Clark,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Isabella
	sn=Clark
	cn=Isabella Clark
Object Details:
	sAMAccountType=805306368
	sAMAccountName=iclark1
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3818379735-837213332-531604769-3351
	primaryGroupID=513
	pwdLastSet=12:11.23 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=05631955-1980-48ba-bf6f-b8f8ce0f1139
	whenChanged=12:21.43 PM, Wed 11/05/2025
	whenCreated=12:11.23 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30015
	uSNCreated=26327
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=8686 Rachel Fords, Port Jason, NE 94930
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 12:21:43.969
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Ethan Fisher
	distinguishedName=CN=Ethan Fisher,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Ethan
	sn=Fisher
	cn=Ethan Fisher
Object Details:
	sAMAccountType=805306368
	sAMAccountName=efisher
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3818379735-837213332-531604769-2662
	primaryGroupID=513
	pwdLastSet=12:10.41 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=fce4ff53-9a29-4ee9-8a17-7d171ca14ed9
	whenChanged=12:21.43 PM, Wed 11/05/2025
	whenCreated=12:10.41 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30013
	uSNCreated=22170
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=79800 Bruce Vista, Hortonberg, HI 64197
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 12:21:43.969
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Sarah Hill
	distinguishedName=CN=Sarah Hill,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Sarah
	sn=Hill
	cn=Sarah Hill
Object Details:
	sAMAccountType=805306368
	sAMAccountName=shill
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3818379735-837213332-531604769-1829
	primaryGroupID=513
	pwdLastSet=12:09.50 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=ab2b7453-8982-453e-8f6b-0884bca2f46e
	whenChanged=12:21.43 PM, Wed 11/05/2025
	whenCreated=12:09.50 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30011
	uSNCreated=17139
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=837 Wolfe Street, Mitchellhaven, VT 83781
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 12:21:43.938
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Alessia Ross
	distinguishedName=CN=Alessia Ross,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Alessia
	sn=Ross
	cn=Alessia Ross
Object Details:
	sAMAccountType=805306368
	sAMAccountName=aross1
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3818379735-837213332-531604769-1969
	primaryGroupID=513
	pwdLastSet=12:09.59 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=36d06b50-fa42-40f0-84b6-298a815e4d92
	whenChanged=12:21.43 PM, Wed 11/05/2025
	whenCreated=12:09.59 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30009
	uSNCreated=17987
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=4994 Kathleen Overpass Apt. 818, Port Larryborough, ND 84763
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 12:21:43.938
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=James Porter
	distinguishedName=CN=James Porter,OU=Executive,OU=Departments,DC=allports,DC=local
	givenName=James
	sn=Porter
	cn=James Porter
Object Details:
	sAMAccountType=805306368
	sAMAccountName=jporter
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3818379735-837213332-531604769-3332
	primaryGroupID=513
	pwdLastSet=12:11.22 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=ed618445-bed5-4713-b725-262479fb7d8e
	whenChanged=12:21.43 PM, Wed 11/05/2025
	whenCreated=12:11.22 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30007
	uSNCreated=26210
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=25652 Desiree Forge, West Juliefurt, OR 59085
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=CFO


_raw:
11/05/2025 12:21:43.907
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Emily Carter
	distinguishedName=CN=Emily Carter,OU=Executive,OU=Departments,DC=allports,DC=local
	givenName=Emily
	sn=Carter
	cn=Emily Carter
Object Details:
	sAMAccountType=805306368
	sAMAccountName=ecarter
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3818379735-837213332-531604769-2604
	primaryGroupID=513
	pwdLastSet=12:10.37 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=0b65ed40-b89e-402c-8c17-caa31f54062c
	whenChanged=12:21.43 PM, Wed 11/05/2025
	whenCreated=12:10.37 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30005
	uSNCreated=21816
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=5325 Rogers Village, Lydiaport, KY 37558
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Co-Founder & COO


_raw:
11/05/2025 12:21:43.907
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Schema Admins
	distinguishedName=CN=Schema Admins,CN=Users,DC=allports,DC=local
	cn=Schema Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Schema Admins
	objectSid=S-1-5-21-3818379735-837213332-531604769-518
	objectGUID=89c76039-382e-4ace-af00-c1c195c30ffa
	whenChanged=12:21.43 PM, Wed 11/05/2025
	whenCreated=12:06.33 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30003
	uSNCreated=12336
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170633.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483640
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local
	member=CN=Administrator,CN=Users,DC=allports,DC=local
	description=Designated administrators of the schema


_raw:
11/05/2025 12:21:43.907
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Eleanor Moore
	distinguishedName=CN=Eleanor Moore,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Eleanor
	sn=Moore
	cn=Eleanor Moore
Object Details:
	sAMAccountType=805306368
	sAMAccountName=emoore
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3818379735-837213332-531604769-3816
	primaryGroupID=513
	pwdLastSet=12:11.51 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=340cf438-009d-40b8-b3c9-75c51d6824fc
	whenChanged=12:21.43 PM, Wed 11/05/2025
	whenCreated=12:11.51 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30002
	uSNCreated=29131
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=212 James Vista, Porterport, NH 76563
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 12:21:43.891
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Michael Rivera
	distinguishedName=CN=Michael Rivera,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Michael
	sn=Rivera
	cn=Michael Rivera
Object Details:
	sAMAccountType=805306368
	sAMAccountName=mrivera1
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3818379735-837213332-531604769-2647
	primaryGroupID=513
	pwdLastSet=12:10.40 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=62127525-e4c0-48ba-91ba-a93ee17444d9
	whenChanged=12:21.43 PM, Wed 11/05/2025
	whenCreated=12:10.40 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30000
	uSNCreated=22077
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=11949 Gray Meadows Apt. 897, Lindseyberg, NV 06447
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 12:21:43.891
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Administrator
	distinguishedName=CN=Administrator,CN=Users,DC=allports,DC=local
	cn=Administrator
Object Details:
	sAMAccountType=805306368
	sAMAccountName=Administrator
	logonCount=1
	accountExpires=0
	objectSid=S-1-5-21-3818379735-837213332-531604769-500
	primaryGroupID=513
	pwdLastSet=11:58.14 AM, Wed 11/05/2025
	lastLogon=12:47.08 PM, Tue 06/21/2022
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=da83af10-e3d0-4f64-9d42-88db4f299763
	whenChanged=12:21.43 PM, Wed 11/05/2025
	whenCreated=12:05.22 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=29998
	uSNCreated=8196
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170633.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	adminCount=1
	logonHours=<binary>
	memberOf=CN=Group Policy Creator Owners,CN=Users,DC=allports,DC=local|CN=Domain Admins,CN=Users,DC=allports,DC=local|CN=Enterprise Admins,CN=Users,DC=allports,DC=local|CN=Schema Admins,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	description=Built-in account for administering the computer/domain


_raw:
11/05/2025 12:21:43.876
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Enterprise Key Admins
	distinguishedName=CN=Enterprise Key Admins,CN=Users,DC=allports,DC=local
	cn=Enterprise Key Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Enterprise Key Admins
	objectSid=S-1-5-21-3818379735-837213332-531604769-527
	objectGUID=7052b10c-058e-48c3-b6e2-46c6cb29cbac
	whenChanged=12:21.43 PM, Wed 11/05/2025
	whenCreated=12:06.33 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=29996
	uSNCreated=12453
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170633.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483640
	adminCount=1
	description=Members of this group can perform administrative actions on key objects within the forest.


_raw:
11/05/2025 12:21:43.876
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Kai Hill
	distinguishedName=CN=Kai Hill,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Kai
	sn=Hill
	cn=Kai Hill
Object Details:
	sAMAccountType=805306368
	sAMAccountName=khill
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3818379735-837213332-531604769-2142
	primaryGroupID=513
	pwdLastSet=12:10.09 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=8af87906-92bb-4066-b6bc-8febfb7e3d7b
	whenChanged=12:21.43 PM, Wed 11/05/2025
	whenCreated=12:10.09 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=29995
	uSNCreated=19036
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=20294 Fletcher Turnpike, Fostertown, DE 39758
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 12:21:43.860
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Enterprise Admins
	distinguishedName=CN=Enterprise Admins,CN=Users,DC=allports,DC=local
	cn=Enterprise Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Enterprise Admins
	objectSid=S-1-5-21-3818379735-837213332-531604769-519
	objectGUID=f8a7b004-8f7d-4c33-b8f2-5c9650c2b2c9
	whenChanged=12:21.43 PM, Wed 11/05/2025
	whenCreated=12:06.33 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=29993
	uSNCreated=12339
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170633.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483640
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	member=CN=Administrator,CN=Users,DC=allports,DC=local
	description=Designated administrators of the enterprise


_raw:
11/05/2025 12:21:43.860
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Nora Nelson
	distinguishedName=CN=Nora Nelson,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Nora
	sn=Nelson
	cn=Nora Nelson
Object Details:
	sAMAccountType=805306368
	sAMAccountName=nnelson
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3818379735-837213332-531604769-1850
	primaryGroupID=513
	pwdLastSet=12:09.51 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=365ec601-168a-45e9-9433-1cec2f2c2772
	whenChanged=12:21.43 PM, Wed 11/05/2025
	whenCreated=12:09.51 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=29992
	uSNCreated=17268
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=886 Alexander Ridges Suite 360, West William, OK 83863
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 12:21:43.797
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Container,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=AdminSDHolder
	distinguishedName=CN=AdminSDHolder,CN=System,DC=allports,DC=local
	cn=AdminSDHolder
Object Details:
	objectGUID=4a93d4e9-972e-4d25-954f-7281f3e281b6
	whenChanged=12:21.43 PM, Wed 11/05/2025
	whenCreated=12:05.21 PM, Wed 11/05/2025
	objectClass=top|container
Event Details:
	uSNChanged=29990
	uSNCreated=5704
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170633.0Z|16010101000000.0Z
	isCriticalSystemObject=TRUE
	systemFlags=-1946157056
	showInAdvancedViewOnly=TRUE