_raw:
11/05/2025 12:18:30.499
dcName=LDAP://APT-DC-01.allports.local/
admonEventType=schema
className=dMD
classCN=DMD
cn=MandatoryProperties
instanceType=MandatoryProperties
nTSecurityDescriptor=MandatoryProperties
objectCategory=MandatoryProperties
objectClass=MandatoryProperties
cn=OptionalProperties
instanceType=OptionalProperties
nTSecurityDescriptor=OptionalProperties
objectCategory=OptionalProperties
objectClass=OptionalProperties
adminDescription=OptionalProperties
adminDisplayName=OptionalProperties
allowedAttributes=OptionalProperties
allowedAttributesEffective=OptionalProperties
allowedChildClasses=OptionalProperties
allowedChildClassesEffective=OptionalProperties
bridgeheadServerListBL=OptionalProperties
canonicalName=OptionalProperties
createTimeStamp=OptionalProperties
description=OptionalProperties
directReports=OptionalProperties
displayName=OptionalProperties
displayNamePrintable=OptionalProperties
distinguishedName=OptionalProperties
dmdName=OptionalProperties
dSASignature=OptionalProperties
dSCorePropagationData=OptionalProperties
extensionName=OptionalProperties
flags=OptionalProperties
fromEntry=OptionalProperties
frsComputerReferenceBL=OptionalProperties
fRSMemberReferenceBL=OptionalProperties
fSMORoleOwner=OptionalProperties
isCriticalSystemObject=OptionalProperties
isDeleted=OptionalProperties
isPrivilegeHolder=OptionalProperties
isRecycled=OptionalProperties
lastKnownParent=OptionalProperties
managedObjects=OptionalProperties
masteredBy=OptionalProperties
memberOf=OptionalProperties
modifyTimeStamp=OptionalProperties
mS-DS-ConsistencyChildCount=OptionalProperties
mS-DS-ConsistencyGuid=OptionalProperties
msCOM-PartitionSetLink=OptionalProperties
msCOM-UserLink=OptionalProperties
msDFSR-ComputerReferenceBL=OptionalProperties
msDFSR-MemberReferenceBL=OptionalProperties
msDS-Approx-Immed-Subordinates=OptionalProperties
msDS-AuthenticatedToAccountlist=OptionalProperties
msDS-ClaimSharesPossibleValuesWithBL=OptionalProperties
msDS-CloudAnchor=OptionalProperties
msDS-EnabledFeatureBL=OptionalProperties
msDS-HostServiceAccountBL=OptionalProperties
msDS-IntId=OptionalProperties
msDS-IsDomainFor=OptionalProperties
msDS-IsFullReplicaFor=OptionalProperties
msDS-IsPartialReplicaFor=OptionalProperties
msDS-IsPrimaryComputerFor=OptionalProperties
msDS-KrbTgtLinkBl=OptionalProperties
msDS-LastKnownRDN=OptionalProperties
msDS-LocalEffectiveDeletionTime=OptionalProperties
msDS-LocalEffectiveRecycleTime=OptionalProperties
msDs-masteredBy=OptionalProperties
msds-memberOfTransitive=OptionalProperties
msDS-MembersForAzRoleBL=OptionalProperties
msDS-MembersOfResourcePropertyListBL=OptionalProperties
msds-memberTransitive=OptionalProperties
msDS-NC-RO-Replica-Locations-BL=OptionalProperties
msDS-NCReplCursors=OptionalProperties
msDS-NCReplInboundNeighbors=OptionalProperties
msDS-NCReplOutboundNeighbors=OptionalProperties
msDS-NcType=OptionalProperties
msDS-NonMembersBL=OptionalProperties
msDS-ObjectReferenceBL=OptionalProperties
msDS-ObjectSoa=OptionalProperties
msDS-OIDToGroupLinkBl=OptionalProperties
msDS-OperationsForAzRoleBL=OptionalProperties
msDS-OperationsForAzTaskBL=OptionalProperties
msDS-parentdistname=OptionalProperties
msDS-PrincipalName=OptionalProperties
msDS-PSOApplied=OptionalProperties
msDS-ReplAttributeMetaData=OptionalProperties
msDS-ReplValueMetaData=OptionalProperties
msDS-ReplValueMetaDataExt=OptionalProperties
msDS-RevealedDSAs=OptionalProperties
msDS-RevealedListBL=OptionalProperties
msDs-Schema-Extensions=OptionalProperties
msDS-SourceAnchor=OptionalProperties
msDS-TasksForAzRoleBL=OptionalProperties
msDS-TasksForAzTaskBL=OptionalProperties
msDS-TDOEgressBL=OptionalProperties
msDS-TDOIngressBL=OptionalProperties
msDS-USNLastSyncSuccess=OptionalProperties
msDS-ValueTypeReferenceBL=OptionalProperties
msSFU30PosixMemberOf=OptionalProperties
name=OptionalProperties
netbootSCPBL=OptionalProperties
nonSecurityMemberBL=OptionalProperties
objectGUID=OptionalProperties
objectVersion=OptionalProperties
otherWellKnownObjects=OptionalProperties
ownerBL=OptionalProperties
partialAttributeDeletionList=OptionalProperties
partialAttributeSet=OptionalProperties
possibleInferiors=OptionalProperties
prefixMap=OptionalProperties
proxiedObjectName=OptionalProperties
proxyAddresses=OptionalProperties
queryPolicyBL=OptionalProperties
replPropertyMetaData=OptionalProperties
replUpToDateVector=OptionalProperties
repsFrom=OptionalProperties
repsTo=OptionalProperties
revision=OptionalProperties
schemaInfo=OptionalProperties
schemaUpdate=OptionalProperties
sDRightsEffective=OptionalProperties
serverReferenceBL=OptionalProperties
showInAdvancedViewOnly=OptionalProperties
siteObjectBL=OptionalProperties
structuralObjectClass=OptionalProperties
subRefs=OptionalProperties
subSchemaSubEntry=OptionalProperties
systemFlags=OptionalProperties
url=OptionalProperties
uSNChanged=OptionalProperties
uSNCreated=OptionalProperties
uSNDSALastObjRemoved=OptionalProperties
USNIntersite=OptionalProperties
uSNLastObjRem=OptionalProperties
uSNSource=OptionalProperties
wbemPath=OptionalProperties
wellKnownObjects=OptionalProperties
whenChanged=OptionalProperties
whenCreated=OptionalProperties
wWWHomePage=OptionalProperties


_raw:
11/05/2025 12:18:30.499
dcName=LDAP://APT-DC-01.allports.local/
admonEventType=schema
className=nTDSDSA
classCN=NTDS-DSA
instanceType=MandatoryProperties
nTSecurityDescriptor=MandatoryProperties
objectCategory=MandatoryProperties
objectClass=MandatoryProperties
instanceType=OptionalProperties
nTSecurityDescriptor=OptionalProperties
objectCategory=OptionalProperties
objectClass=OptionalProperties
adminDescription=OptionalProperties
adminDisplayName=OptionalProperties
allowedAttributes=OptionalProperties
allowedAttributesEffective=OptionalProperties
allowedChildClasses=OptionalProperties
allowedChildClassesEffective=OptionalProperties
applicationName=OptionalProperties
bridgeheadServerListBL=OptionalProperties
canonicalName=OptionalProperties
cn=OptionalProperties
createTimeStamp=OptionalProperties
description=OptionalProperties
directReports=OptionalProperties
displayName=OptionalProperties
displayNamePrintable=OptionalProperties
distinguishedName=OptionalProperties
dMDLocation=OptionalProperties
dSASignature=OptionalProperties
dSCorePropagationData=OptionalProperties
extensionName=OptionalProperties
flags=OptionalProperties
fromEntry=OptionalProperties
frsComputerReferenceBL=OptionalProperties
fRSMemberReferenceBL=OptionalProperties
fRSRootPath=OptionalProperties
fSMORoleOwner=OptionalProperties
hasMasterNCs=OptionalProperties
hasPartialReplicaNCs=OptionalProperties
invocationId=OptionalProperties
isCriticalSystemObject=OptionalProperties
isDeleted=OptionalProperties
isPrivilegeHolder=OptionalProperties
isRecycled=OptionalProperties
lastBackupRestorationTime=OptionalProperties
lastKnownParent=OptionalProperties
managedBy=OptionalProperties
managedObjects=OptionalProperties
masteredBy=OptionalProperties
memberOf=OptionalProperties
modifyTimeStamp=OptionalProperties
mS-DS-ConsistencyChildCount=OptionalProperties
mS-DS-ConsistencyGuid=OptionalProperties
msCOM-PartitionSetLink=OptionalProperties
msCOM-UserLink=OptionalProperties
msDFSR-ComputerReferenceBL=OptionalProperties
msDFSR-MemberReferenceBL=OptionalProperties
msDS-Approx-Immed-Subordinates=OptionalProperties
msDS-AuthenticatedToAccountlist=OptionalProperties
msDS-Behavior-Version=OptionalProperties
msDS-ClaimSharesPossibleValuesWithBL=OptionalProperties
msDS-CloudAnchor=OptionalProperties
msDS-EnabledFeature=OptionalProperties
msDS-EnabledFeatureBL=OptionalProperties
msDS-HasDomainNCs=OptionalProperties
msDS-hasFullReplicaNCs=OptionalProperties
msDS-HasInstantiatedNCs=OptionalProperties
msDS-hasMasterNCs=OptionalProperties
msDS-HostServiceAccountBL=OptionalProperties
msDS-IsDomainFor=OptionalProperties
msDS-IsFullReplicaFor=OptionalProperties
msDS-isGC=OptionalProperties
msDS-IsPartialReplicaFor=OptionalProperties
msDS-IsPrimaryComputerFor=OptionalProperties
msDS-isRODC=OptionalProperties
msDS-IsUserCachableAtRodc=OptionalProperties
msDS-KrbTgtLinkBl=OptionalProperties
msDS-LastKnownRDN=OptionalProperties
msDS-LocalEffectiveDeletionTime=OptionalProperties
msDS-LocalEffectiveRecycleTime=OptionalProperties
msDs-masteredBy=OptionalProperties
msds-memberOfTransitive=OptionalProperties
msDS-MembersForAzRoleBL=OptionalProperties
msDS-MembersOfResourcePropertyListBL=OptionalProperties
msds-memberTransitive=OptionalProperties
msDS-NC-RO-Replica-Locations-BL=OptionalProperties
msDS-NCReplCursors=OptionalProperties
msDS-NCReplInboundNeighbors=OptionalProperties
msDS-NCReplOutboundNeighbors=OptionalProperties
msDS-NcType=OptionalProperties
msDS-NeverRevealGroup=OptionalProperties
msDS-NonMembersBL=OptionalProperties
msDS-ObjectReferenceBL=OptionalProperties
msDS-ObjectSoa=OptionalProperties
msDS-OIDToGroupLinkBl=OptionalProperties
msDS-OperationsForAzRoleBL=OptionalProperties
msDS-OperationsForAzTaskBL=OptionalProperties
msDS-parentdistname=OptionalProperties
msDS-PrincipalName=OptionalProperties
msDS-PSOApplied=OptionalProperties
msDS-ReplAttributeMetaData=OptionalProperties
msDS-ReplicationEpoch=OptionalProperties
msDS-ReplValueMetaData=OptionalProperties
msDS-ReplValueMetaDataExt=OptionalProperties
msDS-RetiredReplNCSignatures=OptionalProperties
msDS-RevealedDSAs=OptionalProperties
msDS-RevealedListBL=OptionalProperties
msDS-RevealedUsers=OptionalProperties
msDS-RevealOnDemandGroup=OptionalProperties
msDS-Settings=OptionalProperties
msDS-SiteName=OptionalProperties
msDS-SourceAnchor=OptionalProperties
msDS-TasksForAzRoleBL=OptionalProperties
msDS-TasksForAzTaskBL=OptionalProperties
msDS-TDOEgressBL=OptionalProperties
msDS-TDOIngressBL=OptionalProperties
msDS-ValueTypeReferenceBL=OptionalProperties
msSFU30PosixMemberOf=OptionalProperties
name=OptionalProperties
netbootSCPBL=OptionalProperties
networkAddress=OptionalProperties
nonSecurityMemberBL=OptionalProperties
notificationList=OptionalProperties
objectGUID=OptionalProperties
objectVersion=OptionalProperties
options=OptionalProperties
otherWellKnownObjects=OptionalProperties
ownerBL=OptionalProperties
partialAttributeDeletionList=OptionalProperties
partialAttributeSet=OptionalProperties
possibleInferiors=OptionalProperties
proxiedObjectName=OptionalProperties
proxyAddresses=OptionalProperties
queryPolicyBL=OptionalProperties
queryPolicyObject=OptionalProperties
replPropertyMetaData=OptionalProperties
replUpToDateVector=OptionalProperties
repsFrom=OptionalProperties
repsTo=OptionalProperties
retiredReplDSASignatures=OptionalProperties
revision=OptionalProperties
sDRightsEffective=OptionalProperties
serverReference=OptionalProperties
serverReferenceBL=OptionalProperties
showInAdvancedViewOnly=OptionalProperties
siteObjectBL=OptionalProperties
structuralObjectClass=OptionalProperties
subRefs=OptionalProperties
subSchemaSubEntry=OptionalProperties
systemFlags=OptionalProperties
url=OptionalProperties
uSNChanged=OptionalProperties
uSNCreated=OptionalProperties
uSNDSALastObjRemoved=OptionalProperties
USNIntersite=OptionalProperties
uSNLastObjRem=OptionalProperties
uSNSource=OptionalProperties
wbemPath=OptionalProperties
wellKnownObjects=OptionalProperties
whenChanged=OptionalProperties
whenCreated=OptionalProperties
wWWHomePage=OptionalProperties

_sourcetype: ActiveDirectory

source: ActiveDirectory

sourcetype: ActiveDirectory


_raw:
11/05/2025 12:18:30.499
dcName=LDAP://APT-DC-01.allports.local/
admonEventType=schema
className=organization
classCN=Organization
instanceType=MandatoryProperties
nTSecurityDescriptor=MandatoryProperties
o=MandatoryProperties
objectCategory=MandatoryProperties
objectClass=MandatoryProperties
instanceType=OptionalProperties
nTSecurityDescriptor=OptionalProperties
o=OptionalProperties
objectCategory=OptionalProperties
objectClass=OptionalProperties
adminDescription=OptionalProperties
adminDisplayName=OptionalProperties
allowedAttributes=OptionalProperties
allowedAttributesEffective=OptionalProperties
allowedChildClasses=OptionalProperties
allowedChildClassesEffective=OptionalProperties
bridgeheadServerListBL=OptionalProperties
businessCategory=OptionalProperties
canonicalName=OptionalProperties
cn=OptionalProperties
createTimeStamp=OptionalProperties
description=OptionalProperties
destinationIndicator=OptionalProperties
directReports=OptionalProperties
displayName=OptionalProperties
displayNamePrintable=OptionalProperties
distinguishedName=OptionalProperties
dSASignature=OptionalProperties
dSCorePropagationData=OptionalProperties
extensionName=OptionalProperties
facsimileTelephoneNumber=OptionalProperties
flags=OptionalProperties
fromEntry=OptionalProperties
frsComputerReferenceBL=OptionalProperties
fRSMemberReferenceBL=OptionalProperties
fSMORoleOwner=OptionalProperties
internationalISDNNumber=OptionalProperties
isCriticalSystemObject=OptionalProperties
isDeleted=OptionalProperties
isPrivilegeHolder=OptionalProperties
isRecycled=OptionalProperties
l=OptionalProperties
lastKnownParent=OptionalProperties
managedObjects=OptionalProperties
masteredBy=OptionalProperties
memberOf=OptionalProperties
modifyTimeStamp=OptionalProperties
mS-DS-ConsistencyChildCount=OptionalProperties
mS-DS-ConsistencyGuid=OptionalProperties
msCOM-PartitionSetLink=OptionalProperties
msCOM-UserLink=OptionalProperties
msDFSR-ComputerReferenceBL=OptionalProperties
msDFSR-MemberReferenceBL=OptionalProperties
msDS-Approx-Immed-Subordinates=OptionalProperties
msDS-AuthenticatedToAccountlist=OptionalProperties
msDS-ClaimSharesPossibleValuesWithBL=OptionalProperties
msDS-CloudAnchor=OptionalProperties
msDS-EnabledFeatureBL=OptionalProperties
msDS-HostServiceAccountBL=OptionalProperties
msDS-IsDomainFor=OptionalProperties
msDS-IsFullReplicaFor=OptionalProperties
msDS-IsPartialReplicaFor=OptionalProperties
msDS-IsPrimaryComputerFor=OptionalProperties
msDS-KrbTgtLinkBl=OptionalProperties
msDS-LastKnownRDN=OptionalProperties
msDS-LocalEffectiveDeletionTime=OptionalProperties
msDS-LocalEffectiveRecycleTime=OptionalProperties
msDs-masteredBy=OptionalProperties
msds-memberOfTransitive=OptionalProperties
msDS-MembersForAzRoleBL=OptionalProperties
msDS-MembersOfResourcePropertyListBL=OptionalProperties
msds-memberTransitive=OptionalProperties
msDS-NC-RO-Replica-Locations-BL=OptionalProperties
msDS-NCReplCursors=OptionalProperties
msDS-NCReplInboundNeighbors=OptionalProperties
msDS-NCReplOutboundNeighbors=OptionalProperties
msDS-NcType=OptionalProperties
msDS-NonMembersBL=OptionalProperties
msDS-ObjectReferenceBL=OptionalProperties
msDS-ObjectSoa=OptionalProperties
msDS-OIDToGroupLinkBl=OptionalProperties
msDS-OperationsForAzRoleBL=OptionalProperties
msDS-OperationsForAzTaskBL=OptionalProperties
msDS-parentdistname=OptionalProperties
msDS-PrincipalName=OptionalProperties
msDS-PSOApplied=OptionalProperties
msDS-ReplAttributeMetaData=OptionalProperties
msDS-ReplValueMetaData=OptionalProperties
msDS-ReplValueMetaDataExt=OptionalProperties
msDS-RevealedDSAs=OptionalProperties
msDS-RevealedListBL=OptionalProperties
msDS-SourceAnchor=OptionalProperties
msDS-TasksForAzRoleBL=OptionalProperties
msDS-TasksForAzTaskBL=OptionalProperties
msDS-TDOEgressBL=OptionalProperties
msDS-TDOIngressBL=OptionalProperties
msDS-ValueTypeReferenceBL=OptionalProperties
msSFU30PosixMemberOf=OptionalProperties
name=OptionalProperties
netbootSCPBL=OptionalProperties
nonSecurityMemberBL=OptionalProperties
objectGUID=OptionalProperties
objectVersion=OptionalProperties
otherWellKnownObjects=OptionalProperties
ownerBL=OptionalProperties
partialAttributeDeletionList=OptionalProperties
partialAttributeSet=OptionalProperties
physicalDeliveryOfficeName=OptionalProperties
possibleInferiors=OptionalProperties
postalAddress=OptionalProperties
postalCode=OptionalProperties
postOfficeBox=OptionalProperties
preferredDeliveryMethod=OptionalProperties
proxiedObjectName=OptionalProperties
proxyAddresses=OptionalProperties
queryPolicyBL=OptionalProperties
registeredAddress=OptionalProperties
replPropertyMetaData=OptionalProperties
replUpToDateVector=OptionalProperties
repsFrom=OptionalProperties
repsTo=OptionalProperties
revision=OptionalProperties
sDRightsEffective=OptionalProperties
searchGuide=OptionalProperties
seeAlso=OptionalProperties
serverReferenceBL=OptionalProperties
showInAdvancedViewOnly=OptionalProperties
siteObjectBL=OptionalProperties
st=OptionalProperties
street=OptionalProperties
structuralObjectClass=OptionalProperties
subRefs=OptionalProperties
subSchemaSubEntry=OptionalProperties
systemFlags=OptionalProperties
telephoneNumber=OptionalProperties
teletexTerminalIdentifier=OptionalProperties
telexNumber=OptionalProperties
url=OptionalProperties
userPassword=OptionalProperties
uSNChanged=OptionalProperties
uSNCreated=OptionalProperties
uSNDSALastObjRemoved=OptionalProperties
USNIntersite=OptionalProperties
uSNLastObjRem=OptionalProperties
uSNSource=OptionalProperties
wbemPath=OptionalProperties
wellKnownObjects=OptionalProperties
whenChanged=OptionalProperties
whenCreated=OptionalProperties
wWWHomePage=OptionalProperties
x121Address=OptionalProperties


_raw:
11/05/2025 12:18:30.484
dcName=APT-DC-01.allports.local
admonEventType=Start
Names:
	objectCategory=CN=NTDS-DSA,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=NTDS Settings
	distinguishedName=CN=NTDS Settings,CN=APT-DC-01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=allports,DC=local
	cn=NTDS Settings
Object Details:
	objectGUID=937a4aa0-0ef2-479f-8706-4252439205c3
	whenChanged=12:13.50 PM, Wed 11/05/2025
	whenCreated=12:07.39 PM, Wed 11/05/2025
	objectClass=top|applicationSettings|nTDSDSA
Event Details:
	uSNChanged=27531
	uSNCreated=5814
	instanceType=4
Additional Details:
	msDS-hasMasterNCs=DC=ForestDnsZones,DC=allports,DC=local|DC=DomainDnsZones,DC=allports,DC=local|CN=Schema,CN=Configuration,DC=allports,DC=local|CN=Configuration,DC=allports,DC=local|DC=allports,DC=local
	msDS-HasDomainNCs=DC=allports,DC=local
	msDS-HasInstantiatedNCs=B:8:0000000D:DC=ForestDnsZones,DC=allports,DC=local|B:8:0000000D:DC=DomainDnsZones,DC=allports,DC=local|B:8:0000000D:CN=Schema,CN=Configuration,DC=allports,DC=local|B:8:0000000D:CN=Configuration,DC=allports,DC=local|B:8:00000005:DC=allports,DC=local
	msDS-Behavior-Version=7
	dSCorePropagationData=20251105170841.0Z|16010101000004.0Z
	serverReferenceBL=CN=APT-DC-01,CN=Topology,CN=Domain System Volume,CN=DFSR-GlobalSettings,CN=System,DC=allports,DC=local
	systemFlags=33554432
	options=1
	showInAdvancedViewOnly=TRUE
	invocationId=<binary>
	dMDLocation=CN=Schema,CN=Configuration,DC=allports,DC=local
	hasMasterNCs=CN=Schema,CN=Configuration,DC=allports,DC=local|CN=Configuration,DC=allports,DC=local|DC=allports,DC=local


_raw:
11/05/2025 12:18:16.081
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Read-only Domain Controllers
	distinguishedName=CN=Read-only Domain Controllers,CN=Users,DC=allports,DC=local
	cn=Read-only Domain Controllers
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Read-only Domain Controllers
	objectSid=S-1-5-21-2566587078-248469879-2461941236-521
	objectGUID=d85f1e83-0af5-4af6-a054-d6ef9735d5f0
	whenChanged=12:18.16 PM, Wed 11/05/2025
	whenCreated=12:03.05 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30060
	uSNCreated=12419
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170305.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483646
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local
	description=Members of this group are Read-Only Domain Controllers in the domain


_raw:
11/05/2025 12:18:16.081
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Domain Controllers
	distinguishedName=CN=Domain Controllers,CN=Users,DC=allports,DC=local
	cn=Domain Controllers
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Domain Controllers
	objectSid=S-1-5-21-2566587078-248469879-2461941236-516
	objectGUID=3a200907-f425-44f4-a8d9-6546eb58dba0
	whenChanged=12:18.16 PM, Wed 11/05/2025
	whenCreated=12:03.05 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30059
	uSNCreated=12333
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170305.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483646
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local
	description=All domain controllers in the domain


_raw:
11/05/2025 12:18:16.081
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=krbtgt
	distinguishedName=CN=krbtgt,CN=Users,DC=allports,DC=local
	cn=krbtgt
Object Details:
	sAMAccountType=805306368
	sAMAccountName=krbtgt
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2566587078-248469879-2461941236-502
	primaryGroupID=513
	pwdLastSet=12:03.05 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=514
	objectGUID=66e07770-f691-4b92-804c-68c221a0a05b
	whenChanged=12:18.16 PM, Wed 11/05/2025
	whenCreated=12:03.05 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30057
	uSNCreated=12324
	instanceType=4
Additional Details:
	msDS-SupportedEncryptionTypes=0
	dSCorePropagationData=20251105170305.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	servicePrincipalName=kadmin/changepw
	adminCount=1
	showInAdvancedViewOnly=TRUE
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local
	description=Key Distribution Center Service Account


_raw:
11/05/2025 12:18:16.065
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Backup Operators
	distinguishedName=CN=Backup Operators,CN=Builtin,DC=allports,DC=local
	cn=Backup Operators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Backup Operators
	objectSid=S-1-5-32-551
	objectGUID=4ff417f2-bf87-4a60-ab39-a5228fb290ae
	whenChanged=12:18.16 PM, Wed 11/05/2025
	whenCreated=12:01.42 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30056
	uSNCreated=8216
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170305.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Backup Operators can override security restrictions for the sole purpose of backing up or restoring files


_raw:
11/05/2025 12:18:16.065
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Print Operators
	distinguishedName=CN=Print Operators,CN=Builtin,DC=allports,DC=local
	cn=Print Operators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Print Operators
	objectSid=S-1-5-32-550
	objectGUID=1d359bbf-6e8d-4dee-8769-7fcfb3a3ece6
	whenChanged=12:18.16 PM, Wed 11/05/2025
	whenCreated=12:01.42 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30054
	uSNCreated=8215
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170305.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Members can administer printers installed on domain controllers


_raw:
11/05/2025 12:18:16.065
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Server Operators
	distinguishedName=CN=Server Operators,CN=Builtin,DC=allports,DC=local
	cn=Server Operators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Server Operators
	objectSid=S-1-5-32-549
	objectGUID=820818bc-a2ec-41d0-acea-0a83c661125e
	whenChanged=12:18.16 PM, Wed 11/05/2025
	whenCreated=12:03.05 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30052
	uSNCreated=12360
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170305.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Members can administer domain servers


_raw:
11/05/2025 12:18:16.065
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Account Operators
	distinguishedName=CN=Account Operators,CN=Builtin,DC=allports,DC=local
	cn=Account Operators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Account Operators
	objectSid=S-1-5-32-548
	objectGUID=69e65899-f507-4039-8e8a-c8fe8481bfb5
	whenChanged=12:18.16 PM, Wed 11/05/2025
	whenCreated=12:03.05 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30051
	uSNCreated=12363
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170305.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Members can administer domain user and group accounts


_raw:
11/05/2025 12:18:16.065
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Administrators
	distinguishedName=CN=Administrators,CN=Builtin,DC=allports,DC=local
	cn=Administrators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Administrators
	objectSid=S-1-5-32-544
	objectGUID=571a1695-7c53-4ce8-a188-b1bbb021f7d6
	whenChanged=12:18.16 PM, Wed 11/05/2025
	whenCreated=12:01.42 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30050
	uSNCreated=8201
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170305.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	member=CN=Domain Admins,CN=Users,DC=allports,DC=local|CN=Enterprise Admins,CN=Users,DC=allports,DC=local|CN=Admin,CN=Users,DC=allports,DC=local|CN=cloudbase-init,CN=Users,DC=allports,DC=local|CN=Administrator,CN=Users,DC=allports,DC=local
	description=Administrators have complete and unrestricted access to the computer/domain


_raw:
11/05/2025 12:18:16.050
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Replicator
	distinguishedName=CN=Replicator,CN=Builtin,DC=allports,DC=local
	cn=Replicator
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Replicator
	objectSid=S-1-5-32-552
	objectGUID=92fb7518-0287-4868-9d1a-7893c2449cca
	whenChanged=12:18.16 PM, Wed 11/05/2025
	whenCreated=12:01.42 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30048
	uSNCreated=8217
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170305.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Supports file replication in a domain


_raw:
11/05/2025 12:18:16.050
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Schema Admins
	distinguishedName=CN=Schema Admins,CN=Users,DC=allports,DC=local
	cn=Schema Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Schema Admins
	objectSid=S-1-5-21-2566587078-248469879-2461941236-518
	objectGUID=8ac1d6e9-caf3-4040-a527-51c5e081273c
	whenChanged=12:18.16 PM, Wed 11/05/2025
	whenCreated=12:03.05 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30046
	uSNCreated=12336
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170305.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483640
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local
	member=CN=Administrator,CN=Users,DC=allports,DC=local
	description=Designated administrators of the schema


_raw:
11/05/2025 12:18:16.050
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Ethan Fisher
	distinguishedName=CN=Ethan Fisher,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Ethan
	sn=Fisher
	cn=Ethan Fisher
Object Details:
	sAMAccountType=805306368
	sAMAccountName=efisher
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2566587078-248469879-2461941236-2662
	primaryGroupID=513
	pwdLastSet=12:07.15 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=0842e8e8-beb2-440e-b4b3-4e63533c1056
	whenChanged=12:18.16 PM, Wed 11/05/2025
	whenCreated=12:07.15 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30045
	uSNCreated=22173
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=79800 Bruce Vista, Hortonberg, HI 64197
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 12:18:16.050
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Kai Hill
	distinguishedName=CN=Kai Hill,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Kai
	sn=Hill
	cn=Kai Hill
Object Details:
	sAMAccountType=805306368
	sAMAccountName=khill
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2566587078-248469879-2461941236-2142
	primaryGroupID=513
	pwdLastSet=12:06.42 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=ff90dfe0-168e-4499-b479-5bc1afa7f840
	whenChanged=12:18.16 PM, Wed 11/05/2025
	whenCreated=12:06.42 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30043
	uSNCreated=19039
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=20294 Fletcher Turnpike, Fostertown, DE 39758
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 12:18:16.050
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Nora Nelson
	distinguishedName=CN=Nora Nelson,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Nora
	sn=Nelson
	cn=Nora Nelson
Object Details:
	sAMAccountType=805306368
	sAMAccountName=nnelson
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2566587078-248469879-2461941236-1850
	primaryGroupID=513
	pwdLastSet=12:06.23 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=f9adfedb-4b92-429a-8cc3-1dc1dcc4ce1b
	whenChanged=12:18.16 PM, Wed 11/05/2025
	whenCreated=12:06.23 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30041
	uSNCreated=17271
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=20251105171816.0Z|16010101000000.0Z
	adminCount=1
	streetAddress=886 Alexander Ridges Suite 360, West William, OK 83863
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 12:18:16.050
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Linda Vega
	distinguishedName=CN=Linda Vega,OU=Executive,OU=Departments,DC=allports,DC=local
	givenName=Linda
	sn=Vega
	cn=Linda Vega
Object Details:
	sAMAccountType=805306368
	sAMAccountName=lvega
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2566587078-248469879-2461941236-2760
	primaryGroupID=513
	pwdLastSet=12:07.21 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=7f634ece-7997-428a-b436-cec0ee0843d3
	whenChanged=12:18.16 PM, Wed 11/05/2025
	whenCreated=12:07.21 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30039
	uSNCreated=22764
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=20251105171816.0Z|16010101000000.0Z
	adminCount=1
	streetAddress=36745 Smith Drive, Grantberg, NJ 17682
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=CIO


_raw:
11/05/2025 12:18:16.050
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Enterprise Admins
	distinguishedName=CN=Enterprise Admins,CN=Users,DC=allports,DC=local
	cn=Enterprise Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Enterprise Admins
	objectSid=S-1-5-21-2566587078-248469879-2461941236-519
	objectGUID=835b2bce-628d-4a6c-b612-6f7887120180
	whenChanged=12:18.16 PM, Wed 11/05/2025
	whenCreated=12:03.05 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30037
	uSNCreated=12339
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105171816.0Z|20251105170305.0Z|16010101000416.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483640
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	member=CN=Administrator,CN=Users,DC=allports,DC=local
	description=Designated administrators of the enterprise


_raw:
11/05/2025 12:18:16.050
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Josie Young
	distinguishedName=CN=Josie Young,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Josie
	sn=Young
	cn=Josie Young
Object Details:
	sAMAccountType=805306368
	sAMAccountName=jyoung
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2566587078-248469879-2461941236-3280
	primaryGroupID=513
	pwdLastSet=12:07.53 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=ae3312b2-a193-419c-9ad8-209923db8a10
	whenChanged=12:18.16 PM, Wed 11/05/2025
	whenCreated=12:07.53 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30036
	uSNCreated=25898
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=20251105171816.0Z|16010101000000.0Z
	adminCount=1
	streetAddress=49085 Tucker Circles Suite 272, Novakborough, RI 93174
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 12:18:16.050
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Eleanor Moore
	distinguishedName=CN=Eleanor Moore,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Eleanor
	sn=Moore
	cn=Eleanor Moore
Object Details:
	sAMAccountType=805306368
	sAMAccountName=emoore
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2566587078-248469879-2461941236-3816
	primaryGroupID=513
	pwdLastSet=12:08.26 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=6815f6b0-8e98-4cf9-a96a-c6d82648e42b
	whenChanged=12:18.16 PM, Wed 11/05/2025
	whenCreated=12:08.26 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30034
	uSNCreated=29134
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=20251105171816.0Z|16010101000000.0Z
	adminCount=1
	streetAddress=212 James Vista, Porterport, NH 76563
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 12:18:16.034
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=cloudbase-init
	displayName=cloudbase-init
	distinguishedName=CN=cloudbase-init,CN=Users,DC=allports,DC=local
	cn=cloudbase-init
Object Details:
	sAMAccountType=805306368
	sAMAccountName=cloudbase-init
	logonCount=5
	accountExpires=Never Expires
	objectSid=S-1-5-21-2566587078-248469879-2461941236-1000
	primaryGroupID=513
	pwdLastSet=11:52.38 AM, Wed 11/05/2025
	lastLogon=12:03.45 PM, Wed 11/05/2025
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=66048
	objectGUID=7cd68db0-8d55-4881-8f7b-8e246fc7084e
	whenChanged=12:18.16 PM, Wed 11/05/2025
	whenCreated=12:01.42 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30032
	uSNCreated=8198
	instanceType=4
Additional Details:
	lastLogonTimestamp=12:03.45 PM, Wed 11/05/2025
	dSCorePropagationData=20251105171816.0Z|20251105170305.0Z|16010101000416.0Z
	adminCount=1
	memberOf=CN=Administrators,CN=Builtin,DC=allports,DC=local


_raw:
11/05/2025 12:18:16.034
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Alessia Ross
	distinguishedName=CN=Alessia Ross,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Alessia
	sn=Ross
	cn=Alessia Ross
Object Details:
	sAMAccountType=805306368
	sAMAccountName=aross1
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2566587078-248469879-2461941236-1969
	primaryGroupID=513
	pwdLastSet=12:06.31 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=efedb7ad-d8e8-4022-acde-c18acfe06be6
	whenChanged=12:18.16 PM, Wed 11/05/2025
	whenCreated=12:06.30 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30030
	uSNCreated=17990
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=20251105171816.0Z|16010101000000.0Z
	adminCount=1
	streetAddress=4994 Kathleen Overpass Apt. 818, Port Larryborough, ND 84763
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 12:18:16.003
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Domain Admins
	distinguishedName=CN=Domain Admins,CN=Users,DC=allports,DC=local
	cn=Domain Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Domain Admins
	objectSid=S-1-5-21-2566587078-248469879-2461941236-512
	objectGUID=bf13ebac-d56f-4101-a771-a7d6b75af428
	whenChanged=12:18.15 PM, Wed 11/05/2025
	whenCreated=12:03.05 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30028
	uSNCreated=12345
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105171816.0Z|20251105170305.0Z|16010101000416.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483646
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	member=CN=Logan Clark,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Eleanor Moore,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Isabella Clark,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=James Porter,OU=Executive,OU=Departments,DC=allports,DC=local|CN=Josie Young,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=David Carter,OU=Executive,OU=Departments,DC=allports,DC=local|CN=Bailey Finn,OU=Administration,OU=Departments,DC=allports,DC=local|CN=Kevin Miller,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Linda Vega,OU=Executive,OU=Departments,DC=allports,DC=local|CN=Ethan Fisher,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Michael Rivera,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Emily Carter,OU=Executive,OU=Departments,DC=allports,DC=local|CN=Penelope Brooks,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Kai Hill,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=John Taylor,OU=Executive,OU=Departments,DC=allports,DC=local|CN=Axel White,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Alessia Ross,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Nora Nelson,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Sarah Hill,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Olivia Collins,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Erick Smith,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Administrator,CN=Users,DC=allports,DC=local
	description=Designated administrators of the domain


_raw:
11/05/2025 12:18:16.003
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Key Admins
	distinguishedName=CN=Key Admins,CN=Users,DC=allports,DC=local
	cn=Key Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Key Admins
	objectSid=S-1-5-21-2566587078-248469879-2461941236-526
	objectGUID=e7c25faa-e543-4cc2-8f88-6575b1ba6026
	whenChanged=12:18.15 PM, Wed 11/05/2025
	whenCreated=12:03.05 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30027
	uSNCreated=12450
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105171815.0Z|20251105170305.0Z|16010101000416.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483646
	adminCount=1
	description=Members of this group can perform administrative actions on key objects within the domain.


_raw:
11/05/2025 12:18:16.003
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Administrator
	distinguishedName=CN=Administrator,CN=Users,DC=allports,DC=local
	cn=Administrator
Object Details:
	sAMAccountType=805306368
	sAMAccountName=Administrator
	logonCount=1
	accountExpires=0
	objectSid=S-1-5-21-2566587078-248469879-2461941236-500
	primaryGroupID=513
	pwdLastSet=11:54.31 AM, Wed 11/05/2025
	lastLogon=12:47.08 PM, Tue 06/21/2022
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=1840f29d-6095-4d12-baa6-137c93ff0630
	whenChanged=12:18.15 PM, Wed 11/05/2025
	whenCreated=12:01.42 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30026
	uSNCreated=8196
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105171815.0Z|20251105170305.0Z|16010101000416.0Z
	isCriticalSystemObject=TRUE
	adminCount=1
	logonHours=<binary>
	memberOf=CN=Group Policy Creator Owners,CN=Users,DC=allports,DC=local|CN=Domain Admins,CN=Users,DC=allports,DC=local|CN=Enterprise Admins,CN=Users,DC=allports,DC=local|CN=Schema Admins,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	description=Built-in account for administering the computer/domain


_raw:
11/05/2025 12:18:16.003
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Erick Smith
	distinguishedName=CN=Erick Smith,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Erick
	sn=Smith
	cn=Erick Smith
Object Details:
	sAMAccountType=805306368
	sAMAccountName=esmith
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2566587078-248469879-2461941236-1182
	primaryGroupID=513
	pwdLastSet=12:05.39 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=cfb9ff9c-e302-4b28-aa50-8323304df00a
	whenChanged=12:18.15 PM, Wed 11/05/2025
	whenCreated=12:05.39 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30024
	uSNCreated=13248
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=20251105171815.0Z|16010101000000.0Z
	adminCount=1
	streetAddress=569 Carrie Route Apt. 586, Lake James, NV 94321
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 12:18:15.987
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Admin
	displayName=Admin
	distinguishedName=CN=Admin,CN=Users,DC=allports,DC=local
	cn=Admin
Object Details:
	sAMAccountType=805306368
	sAMAccountName=Admin
	logonCount=1
	accountExpires=Never Expires
	objectSid=S-1-5-21-2566587078-248469879-2461941236-1001
	primaryGroupID=513
	pwdLastSet=11:51.08 AM, Wed 11/05/2025
	lastLogon=06:50.17 AM, Wed 11/05/2025
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=66048
	objectGUID=9c8c917a-3b3d-4a50-859a-5a94a7310698
	whenChanged=12:18.15 PM, Wed 11/05/2025
	whenCreated=12:01.42 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30022
	uSNCreated=8199
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105171815.0Z|20251105170305.0Z|16010101000416.0Z
	adminCount=1
	memberOf=CN=Administrators,CN=Builtin,DC=allports,DC=local


_raw:
11/05/2025 12:18:15.987
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=James Porter
	distinguishedName=CN=James Porter,OU=Executive,OU=Departments,DC=allports,DC=local
	givenName=James
	sn=Porter
	cn=James Porter
Object Details:
	sAMAccountType=805306368
	sAMAccountName=jporter
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2566587078-248469879-2461941236-3332
	primaryGroupID=513
	pwdLastSet=12:07.56 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=ded21e76-0859-465a-b9e6-bf0bd58174ec
	whenChanged=12:18.15 PM, Wed 11/05/2025
	whenCreated=12:07.56 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30020
	uSNCreated=26213
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=20251105171815.0Z|16010101000000.0Z
	adminCount=1
	streetAddress=25652 Desiree Forge, West Juliefurt, OR 59085
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=CFO


_raw:
11/05/2025 12:18:15.987
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Axel White
	distinguishedName=CN=Axel White,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Axel
	sn=White
	cn=Axel White
Object Details:
	sAMAccountType=805306368
	sAMAccountName=awhite1
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2566587078-248469879-2461941236-1985
	primaryGroupID=513
	pwdLastSet=12:06.32 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=8028d371-8def-4055-9bdb-a92750706308
	whenChanged=12:18.15 PM, Wed 11/05/2025
	whenCreated=12:06.32 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30018
	uSNCreated=18089
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=20251105171815.0Z|16010101000000.0Z
	adminCount=1
	streetAddress=2130 David Mount, West Meganland, AZ 73217
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 12:18:15.987
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Kevin Miller
	distinguishedName=CN=Kevin Miller,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Kevin
	sn=Miller
	cn=Kevin Miller
Object Details:
	sAMAccountType=805306368
	sAMAccountName=kmiller
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2566587078-248469879-2461941236-3073
	primaryGroupID=513
	pwdLastSet=12:07.40 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=6c241a67-9acc-4846-a087-a9d75409ce61
	whenChanged=12:18.15 PM, Wed 11/05/2025
	whenCreated=12:07.40 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30016
	uSNCreated=24647
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=20251105171815.0Z|16010101000000.0Z
	adminCount=1
	streetAddress=041 Ronnie Branch, Oconnellfort, WV 97644
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 12:18:15.972
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=John Taylor
	distinguishedName=CN=John Taylor,OU=Executive,OU=Departments,DC=allports,DC=local
	givenName=John
	sn=Taylor
	cn=John Taylor
Object Details:
	sAMAccountType=805306368
	sAMAccountName=jtaylor
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2566587078-248469879-2461941236-2045
	primaryGroupID=513
	pwdLastSet=12:06.36 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=8e1bc965-5fe4-48d0-a588-9a347970553c
	whenChanged=12:18.15 PM, Wed 11/05/2025
	whenCreated=12:06.36 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30014
	uSNCreated=18454
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=20251105171815.0Z|16010101000000.0Z
	adminCount=1
	streetAddress=80159 Rebekah Tunnel, Kevinmouth, NY 57903
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=CISO


_raw:
11/05/2025 12:18:15.972
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Bailey Finn
	distinguishedName=CN=Bailey Finn,OU=Administration,OU=Departments,DC=allports,DC=local
	givenName=Bailey
	sn=Finn
	cn=Bailey Finn
Object Details:
	sAMAccountType=805306368
	sAMAccountName=bfinn
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2566587078-248469879-2461941236-3116
	primaryGroupID=513
	pwdLastSet=12:07.43 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=5ccd885e-f82f-404b-9a2d-01d9bad6b242
	whenChanged=12:18.15 PM, Wed 11/05/2025
	whenCreated=12:07.43 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30012
	uSNCreated=24908
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=20251105171815.0Z|16010101000000.0Z
	adminCount=1
	streetAddress=USNS Jackson, FPO AP 90789
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Director of Technical Services


_raw:
11/05/2025 12:18:15.972
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Sarah Hill
	distinguishedName=CN=Sarah Hill,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Sarah
	sn=Hill
	cn=Sarah Hill
Object Details:
	sAMAccountType=805306368
	sAMAccountName=shill
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2566587078-248469879-2461941236-1829
	primaryGroupID=513
	pwdLastSet=12:06.21 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=074a9f53-f727-4cec-9db1-85b1ddae169b
	whenChanged=12:18.15 PM, Wed 11/05/2025
	whenCreated=12:06.21 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30010
	uSNCreated=17142
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=20251105171815.0Z|16010101000000.0Z
	adminCount=1
	streetAddress=837 Wolfe Street, Mitchellhaven, VT 83781
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 12:18:15.956
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Michael Rivera
	distinguishedName=CN=Michael Rivera,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Michael
	sn=Rivera
	cn=Michael Rivera
Object Details:
	sAMAccountType=805306368
	sAMAccountName=mrivera1
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2566587078-248469879-2461941236-2647
	primaryGroupID=513
	pwdLastSet=12:07.14 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=d77b9a4c-84a0-478f-a698-6e8f8ffd00cd
	whenChanged=12:18.15 PM, Wed 11/05/2025
	whenCreated=12:07.14 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30008
	uSNCreated=22080
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=20251105171815.0Z|16010101000000.0Z
	adminCount=1
	streetAddress=11949 Gray Meadows Apt. 897, Lindseyberg, NV 06447
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 12:18:15.956
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Emily Carter
	distinguishedName=CN=Emily Carter,OU=Executive,OU=Departments,DC=allports,DC=local
	givenName=Emily
	sn=Carter
	cn=Emily Carter
Object Details:
	sAMAccountType=805306368
	sAMAccountName=ecarter
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2566587078-248469879-2461941236-2604
	primaryGroupID=513
	pwdLastSet=12:07.11 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=2c1f554b-8c8f-48b2-b41a-1589ab0380b8
	whenChanged=12:18.15 PM, Wed 11/05/2025
	whenCreated=12:07.11 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30006
	uSNCreated=21819
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=5325 Rogers Village, Lydiaport, KY 37558
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Co-Founder & COO


_raw:
11/05/2025 12:18:15.956
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Isabella Clark
	distinguishedName=CN=Isabella Clark,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Isabella
	sn=Clark
	cn=Isabella Clark
Object Details:
	sAMAccountType=805306368
	sAMAccountName=iclark1
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2566587078-248469879-2461941236-3351
	primaryGroupID=513
	pwdLastSet=12:07.58 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=4d019b3f-e5d7-4072-ade4-5aaccf0416d8
	whenChanged=12:18.15 PM, Wed 11/05/2025
	whenCreated=12:07.58 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30004
	uSNCreated=26330
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=8686 Rachel Fords, Port Jason, NE 94930
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 12:18:15.956
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Logan Clark
	distinguishedName=CN=Logan Clark,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Logan
	sn=Clark
	cn=Logan Clark
Object Details:
	sAMAccountType=805306368
	sAMAccountName=lclark1
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2566587078-248469879-2461941236-3910
	primaryGroupID=513
	pwdLastSet=12:08.32 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=1661d23e-3287-42b8-8af0-d3490c9740ba
	whenChanged=12:18.15 PM, Wed 11/05/2025
	whenCreated=12:08.32 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30002
	uSNCreated=29703
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=29325 Rebecca Estate, Lake Ronald, CO 85102
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 12:18:15.956
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Enterprise Key Admins
	distinguishedName=CN=Enterprise Key Admins,CN=Users,DC=allports,DC=local
	cn=Enterprise Key Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Enterprise Key Admins
	objectSid=S-1-5-21-2566587078-248469879-2461941236-527
	objectGUID=a0821c3c-a710-4724-b712-362155003c54
	whenChanged=12:18.15 PM, Wed 11/05/2025
	whenCreated=12:03.05 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30000
	uSNCreated=12453
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170305.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483640
	adminCount=1
	description=Members of this group can perform administrative actions on key objects within the forest.


_raw:
11/05/2025 12:18:15.956
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=David Carter
	distinguishedName=CN=David Carter,OU=Executive,OU=Departments,DC=allports,DC=local
	givenName=David
	sn=Carter
	cn=David Carter
Object Details:
	sAMAccountType=805306368
	sAMAccountName=dcarter
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2566587078-248469879-2461941236-3181
	primaryGroupID=513
	pwdLastSet=12:07.47 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=5362261a-25c9-4d4b-ac24-d40065388a13
	whenChanged=12:18.15 PM, Wed 11/05/2025
	whenCreated=12:07.47 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=29999
	uSNCreated=25301
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=80034 Stark Walks Apt. 756, Mcdanielberg, WY 73366
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Co-Founder & CEO


_raw:
11/05/2025 12:18:15.956
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Olivia Collins
	distinguishedName=CN=Olivia Collins,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Olivia
	sn=Collins
	cn=Olivia Collins
Object Details:
	sAMAccountType=805306368
	sAMAccountName=ocollins
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2566587078-248469879-2461941236-1430
	primaryGroupID=513
	pwdLastSet=12:05.56 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=19ce650e-dd41-4cad-856a-a982aa4ecc9b
	whenChanged=12:18.15 PM, Wed 11/05/2025
	whenCreated=12:05.56 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=29997
	uSNCreated=14745
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=24735 Webster Locks, North Jonathanton, MD 97223
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 12:18:15.956
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Penelope Brooks
	distinguishedName=CN=Penelope Brooks,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Penelope
	sn=Brooks
	cn=Penelope Brooks
Object Details:
	sAMAccountType=805306368
	sAMAccountName=pbrooks
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2566587078-248469879-2461941236-2375
	primaryGroupID=513
	pwdLastSet=12:06.57 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=66eaf80a-2d58-40c6-9617-bb2d70cecaf4
	whenChanged=12:18.15 PM, Wed 11/05/2025
	whenCreated=12:06.57 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=29995
	uSNCreated=20442
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=373 Dickson Pike, Darrenstad, VA 06979
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 12:18:15.925
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Container,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=AdminSDHolder
	distinguishedName=CN=AdminSDHolder,CN=System,DC=allports,DC=local
	cn=AdminSDHolder
Object Details:
	objectGUID=120fc19a-69cb-4668-b81d-52dec8cce55b
	whenChanged=12:18.15 PM, Wed 11/05/2025
	whenCreated=12:01.42 PM, Wed 11/05/2025
	objectClass=top|container
Event Details:
	uSNChanged=29993
	uSNCreated=5704
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170305.0Z|16010101000000.0Z
	isCriticalSystemObject=TRUE
	systemFlags=-1946157056
	showInAdvancedViewOnly=TRUE


_raw:
11/05/2025 12:17:32.353
dcName=LDAP://APT-DC-01.allports.local/
admonEventType=schema
className=dnsZoneScope
classCN=Dns-Zone-Scope
dc=MandatoryProperties
instanceType=MandatoryProperties
nTSecurityDescriptor=MandatoryProperties
objectCategory=MandatoryProperties
objectClass=MandatoryProperties
dc=OptionalProperties
instanceType=OptionalProperties
nTSecurityDescriptor=OptionalProperties
objectCategory=OptionalProperties
objectClass=OptionalProperties
adminDescription=OptionalProperties
adminDisplayName=OptionalProperties
allowedAttributes=OptionalProperties
allowedAttributesEffective=OptionalProperties
allowedChildClasses=OptionalProperties
allowedChildClassesEffective=OptionalProperties
bridgeheadServerListBL=OptionalProperties
canonicalName=OptionalProperties
cn=OptionalProperties
createTimeStamp=OptionalProperties
description=OptionalProperties
directReports=OptionalProperties
displayName=OptionalProperties
displayNamePrintable=OptionalProperties
distinguishedName=OptionalProperties
dNSProperty=OptionalProperties
dSASignature=OptionalProperties
dSCorePropagationData=OptionalProperties
extensionName=OptionalProperties
flags=OptionalProperties
fromEntry=OptionalProperties
frsComputerReferenceBL=OptionalProperties
fRSMemberReferenceBL=OptionalProperties
fSMORoleOwner=OptionalProperties
isCriticalSystemObject=OptionalProperties
isDeleted=OptionalProperties
isPrivilegeHolder=OptionalProperties
isRecycled=OptionalProperties
lastKnownParent=OptionalProperties
managedBy=OptionalProperties
managedObjects=OptionalProperties
masteredBy=OptionalProperties
memberOf=OptionalProperties
modifyTimeStamp=OptionalProperties
mS-DS-ConsistencyChildCount=OptionalProperties
mS-DS-ConsistencyGuid=OptionalProperties
msCOM-PartitionSetLink=OptionalProperties
msCOM-UserLink=OptionalProperties
msDFSR-ComputerReferenceBL=OptionalProperties
msDFSR-MemberReferenceBL=OptionalProperties
msDS-Approx-Immed-Subordinates=OptionalProperties
msDS-AuthenticatedToAccountlist=OptionalProperties
msDS-ClaimSharesPossibleValuesWithBL=OptionalProperties
msDS-CloudAnchor=OptionalProperties
msDS-EnabledFeatureBL=OptionalProperties
msDS-HostServiceAccountBL=OptionalProperties
msDS-IsDomainFor=OptionalProperties
msDS-IsFullReplicaFor=OptionalProperties
msDS-IsPartialReplicaFor=OptionalProperties
msDS-IsPrimaryComputerFor=OptionalProperties
msDS-KrbTgtLinkBl=OptionalProperties
msDS-LastKnownRDN=OptionalProperties
msDS-LocalEffectiveDeletionTime=OptionalProperties
msDS-LocalEffectiveRecycleTime=OptionalProperties
msDs-masteredBy=OptionalProperties
msds-memberOfTransitive=OptionalProperties
msDS-MembersForAzRoleBL=OptionalProperties
msDS-MembersOfResourcePropertyListBL=OptionalProperties
msds-memberTransitive=OptionalProperties
msDS-NC-RO-Replica-Locations-BL=OptionalProperties
msDS-NCReplCursors=OptionalProperties
msDS-NCReplInboundNeighbors=OptionalProperties
msDS-NCReplOutboundNeighbors=OptionalProperties
msDS-NcType=OptionalProperties
msDS-NonMembersBL=OptionalProperties
msDS-ObjectReferenceBL=OptionalProperties
msDS-ObjectSoa=OptionalProperties
msDS-OIDToGroupLinkBl=OptionalProperties
msDS-OperationsForAzRoleBL=OptionalProperties
msDS-OperationsForAzTaskBL=OptionalProperties
msDS-parentdistname=OptionalProperties
msDS-PrincipalName=OptionalProperties
msDS-PSOApplied=OptionalProperties
msDS-ReplAttributeMetaData=OptionalProperties
msDS-ReplValueMetaData=OptionalProperties
msDS-ReplValueMetaDataExt=OptionalProperties
msDS-RevealedDSAs=OptionalProperties
msDS-RevealedListBL=OptionalProperties
msDS-SourceAnchor=OptionalProperties
msDS-TasksForAzRoleBL=OptionalProperties
msDS-TasksForAzTaskBL=OptionalProperties
msDS-TDOEgressBL=OptionalProperties
msDS-TDOIngressBL=OptionalProperties
msDS-ValueTypeReferenceBL=OptionalProperties
msSFU30PosixMemberOf=OptionalProperties
name=OptionalProperties
netbootSCPBL=OptionalProperties
nonSecurityMemberBL=OptionalProperties
objectGUID=OptionalProperties
objectVersion=OptionalProperties
otherWellKnownObjects=OptionalProperties
ownerBL=OptionalProperties
partialAttributeDeletionList=OptionalProperties
partialAttributeSet=OptionalProperties
possibleInferiors=OptionalProperties
proxiedObjectName=OptionalProperties
proxyAddresses=OptionalProperties
queryPolicyBL=OptionalProperties
replPropertyMetaData=OptionalProperties
replUpToDateVector=OptionalProperties
repsFrom=OptionalProperties
repsTo=OptionalProperties
revision=OptionalProperties
sDRightsEffective=OptionalProperties
serverReferenceBL=OptionalProperties
showInAdvancedViewOnly=OptionalProperties
siteObjectBL=OptionalProperties
structuralObjectClass=OptionalProperties
subRefs=OptionalProperties
subSchemaSubEntry=OptionalProperties
systemFlags=OptionalProperties
url=OptionalProperties
uSNChanged=OptionalProperties
uSNCreated=OptionalProperties
uSNDSALastObjRemoved=OptionalProperties
USNIntersite=OptionalProperties
uSNLastObjRem=OptionalProperties
uSNSource=OptionalProperties
wbemPath=OptionalProperties
wellKnownObjects=OptionalProperties
whenChanged=OptionalProperties
whenCreated=OptionalProperties
wWWHomePage=OptionalProperties


_raw:
11/05/2025 12:17:32.353
dcName=LDAP://APT-DC-01.allports.local/
admonEventType=schema
className=dnsZoneScopeContainer
classCN=Dns-Zone-Scope-Container
instanceType=MandatoryProperties
nTSecurityDescriptor=MandatoryProperties
objectCategory=MandatoryProperties
objectClass=MandatoryProperties
instanceType=OptionalProperties
nTSecurityDescriptor=OptionalProperties
objectCategory=OptionalProperties
objectClass=OptionalProperties
adminDescription=OptionalProperties
adminDisplayName=OptionalProperties
allowedAttributes=OptionalProperties
allowedAttributesEffective=OptionalProperties
allowedChildClasses=OptionalProperties
allowedChildClassesEffective=OptionalProperties
bridgeheadServerListBL=OptionalProperties
canonicalName=OptionalProperties
cn=OptionalProperties
createTimeStamp=OptionalProperties
description=OptionalProperties
directReports=OptionalProperties
displayName=OptionalProperties
displayNamePrintable=OptionalProperties
distinguishedName=OptionalProperties
dSASignature=OptionalProperties
dSCorePropagationData=OptionalProperties
extensionName=OptionalProperties
flags=OptionalProperties
fromEntry=OptionalProperties
frsComputerReferenceBL=OptionalProperties
fRSMemberReferenceBL=OptionalProperties
fSMORoleOwner=OptionalProperties
isCriticalSystemObject=OptionalProperties
isDeleted=OptionalProperties
isPrivilegeHolder=OptionalProperties
isRecycled=OptionalProperties
lastKnownParent=OptionalProperties
managedObjects=OptionalProperties
masteredBy=OptionalProperties
memberOf=OptionalProperties
modifyTimeStamp=OptionalProperties
mS-DS-ConsistencyChildCount=OptionalProperties
mS-DS-ConsistencyGuid=OptionalProperties
msCOM-PartitionSetLink=OptionalProperties
msCOM-UserLink=OptionalProperties
msDFSR-ComputerReferenceBL=OptionalProperties
msDFSR-MemberReferenceBL=OptionalProperties
msDS-Approx-Immed-Subordinates=OptionalProperties
msDS-AuthenticatedToAccountlist=OptionalProperties
msDS-ClaimSharesPossibleValuesWithBL=OptionalProperties
msDS-CloudAnchor=OptionalProperties
msDS-EnabledFeatureBL=OptionalProperties
msDS-HostServiceAccountBL=OptionalProperties
msDS-IsDomainFor=OptionalProperties
msDS-IsFullReplicaFor=OptionalProperties
msDS-IsPartialReplicaFor=OptionalProperties
msDS-IsPrimaryComputerFor=OptionalProperties
msDS-KrbTgtLinkBl=OptionalProperties
msDS-LastKnownRDN=OptionalProperties
msDS-LocalEffectiveDeletionTime=OptionalProperties
msDS-LocalEffectiveRecycleTime=OptionalProperties
msDs-masteredBy=OptionalProperties
msds-memberOfTransitive=OptionalProperties
msDS-MembersForAzRoleBL=OptionalProperties
msDS-MembersOfResourcePropertyListBL=OptionalProperties
msds-memberTransitive=OptionalProperties
msDS-NC-RO-Replica-Locations-BL=OptionalProperties
msDS-NCReplCursors=OptionalProperties
msDS-NCReplInboundNeighbors=OptionalProperties
msDS-NCReplOutboundNeighbors=OptionalProperties
msDS-NcType=OptionalProperties
msDS-NonMembersBL=OptionalProperties
msDS-ObjectReferenceBL=OptionalProperties
msDS-ObjectSoa=OptionalProperties
msDS-OIDToGroupLinkBl=OptionalProperties
msDS-OperationsForAzRoleBL=OptionalProperties
msDS-OperationsForAzTaskBL=OptionalProperties
msDS-parentdistname=OptionalProperties
msDS-PrincipalName=OptionalProperties
msDS-PSOApplied=OptionalProperties
msDS-ReplAttributeMetaData=OptionalProperties
msDS-ReplValueMetaData=OptionalProperties
msDS-ReplValueMetaDataExt=OptionalProperties
msDS-RevealedDSAs=OptionalProperties
msDS-RevealedListBL=OptionalProperties
msDS-SourceAnchor=OptionalProperties
msDS-TasksForAzRoleBL=OptionalProperties
msDS-TasksForAzTaskBL=OptionalProperties
msDS-TDOEgressBL=OptionalProperties
msDS-TDOIngressBL=OptionalProperties
msDS-ValueTypeReferenceBL=OptionalProperties
msSFU30PosixMemberOf=OptionalProperties
name=OptionalProperties
netbootSCPBL=OptionalProperties
nonSecurityMemberBL=OptionalProperties
objectGUID=OptionalProperties
objectVersion=OptionalProperties
otherWellKnownObjects=OptionalProperties
ownerBL=OptionalProperties
partialAttributeDeletionList=OptionalProperties
partialAttributeSet=OptionalProperties
possibleInferiors=OptionalProperties
proxiedObjectName=OptionalProperties
proxyAddresses=OptionalProperties
queryPolicyBL=OptionalProperties
replPropertyMetaData=OptionalProperties
replUpToDateVector=OptionalProperties
repsFrom=OptionalProperties
repsTo=OptionalProperties
revision=OptionalProperties
sDRightsEffective=OptionalProperties
serverReferenceBL=OptionalProperties
showInAdvancedViewOnly=OptionalProperties
siteObjectBL=OptionalProperties
structuralObjectClass=OptionalProperties
subRefs=OptionalProperties
subSchemaSubEntry=OptionalProperties
systemFlags=OptionalProperties
url=OptionalProperties
uSNChanged=OptionalProperties
uSNCreated=OptionalProperties
uSNDSALastObjRemoved=OptionalProperties
USNIntersite=OptionalProperties
uSNLastObjRem=OptionalProperties
uSNSource=OptionalProperties
wbemPath=OptionalProperties
wellKnownObjects=OptionalProperties
whenChanged=OptionalProperties
whenCreated=OptionalProperties
wWWHomePage=OptionalProperties


_raw:
11/05/2025 12:17:32.353
dcName=LDAP://APT-DC-01.allports.local/
admonEventType=schema
className=msDS-ShadowPrincipal
classCN=ms-DS-Shadow-Principal
instanceType=MandatoryProperties
msDS-ShadowPrincipalSid=MandatoryProperties
nTSecurityDescriptor=MandatoryProperties
objectCategory=MandatoryProperties
objectClass=MandatoryProperties
instanceType=OptionalProperties
msDS-ShadowPrincipalSid=OptionalProperties
nTSecurityDescriptor=OptionalProperties
objectCategory=OptionalProperties
objectClass=OptionalProperties
adminDescription=OptionalProperties
adminDisplayName=OptionalProperties
allowedAttributes=OptionalProperties
allowedAttributesEffective=OptionalProperties
allowedChildClasses=OptionalProperties
allowedChildClassesEffective=OptionalProperties
bridgeheadServerListBL=OptionalProperties
canonicalName=OptionalProperties
cn=OptionalProperties
createTimeStamp=OptionalProperties
description=OptionalProperties
directReports=OptionalProperties
displayName=OptionalProperties
displayNamePrintable=OptionalProperties
distinguishedName=OptionalProperties
dSASignature=OptionalProperties
dSCorePropagationData=OptionalProperties
extensionName=OptionalProperties
flags=OptionalProperties
fromEntry=OptionalProperties
frsComputerReferenceBL=OptionalProperties
fRSMemberReferenceBL=OptionalProperties
fSMORoleOwner=OptionalProperties
isCriticalSystemObject=OptionalProperties
isDeleted=OptionalProperties
isPrivilegeHolder=OptionalProperties
isRecycled=OptionalProperties
lastKnownParent=OptionalProperties
managedObjects=OptionalProperties
masteredBy=OptionalProperties
member=OptionalProperties
memberOf=OptionalProperties
modifyTimeStamp=OptionalProperties
mS-DS-ConsistencyChildCount=OptionalProperties
mS-DS-ConsistencyGuid=OptionalProperties
msCOM-PartitionSetLink=OptionalProperties
msCOM-UserLink=OptionalProperties
msDFSR-ComputerReferenceBL=OptionalProperties
msDFSR-MemberReferenceBL=OptionalProperties
msDS-Approx-Immed-Subordinates=OptionalProperties
msDS-AuthenticatedToAccountlist=OptionalProperties
msDS-ClaimSharesPossibleValuesWithBL=OptionalProperties
msDS-CloudAnchor=OptionalProperties
msDS-EnabledFeatureBL=OptionalProperties
msDS-HostServiceAccountBL=OptionalProperties
msDS-IsDomainFor=OptionalProperties
msDS-IsFullReplicaFor=OptionalProperties
msDS-IsPartialReplicaFor=OptionalProperties
msDS-IsPrimaryComputerFor=OptionalProperties
msDS-KrbTgtLinkBl=OptionalProperties
msDS-LastKnownRDN=OptionalProperties
msDS-LocalEffectiveDeletionTime=OptionalProperties
msDS-LocalEffectiveRecycleTime=OptionalProperties
msDs-masteredBy=OptionalProperties
msds-memberOfTransitive=OptionalProperties
msDS-MembersForAzRoleBL=OptionalProperties
msDS-MembersOfResourcePropertyListBL=OptionalProperties
msds-memberTransitive=OptionalProperties
msDS-NC-RO-Replica-Locations-BL=OptionalProperties
msDS-NCReplCursors=OptionalProperties
msDS-NCReplInboundNeighbors=OptionalProperties
msDS-NCReplOutboundNeighbors=OptionalProperties
msDS-NcType=OptionalProperties
msDS-NonMembersBL=OptionalProperties
msDS-ObjectReferenceBL=OptionalProperties
msDS-ObjectSoa=OptionalProperties
msDS-OIDToGroupLinkBl=OptionalProperties
msDS-OperationsForAzRoleBL=OptionalProperties
msDS-OperationsForAzTaskBL=OptionalProperties
msDS-parentdistname=OptionalProperties
msDS-PrincipalName=OptionalProperties
msDS-PSOApplied=OptionalProperties
msDS-ReplAttributeMetaData=OptionalProperties
msDS-ReplValueMetaData=OptionalProperties
msDS-ReplValueMetaDataExt=OptionalProperties
msDS-RevealedDSAs=OptionalProperties
msDS-RevealedListBL=OptionalProperties
msDS-SourceAnchor=OptionalProperties
msDS-TasksForAzRoleBL=OptionalProperties
msDS-TasksForAzTaskBL=OptionalProperties
msDS-TDOEgressBL=OptionalProperties
msDS-TDOIngressBL=OptionalProperties
msDS-ValueTypeReferenceBL=OptionalProperties
msSFU30PosixMemberOf=OptionalProperties
name=OptionalProperties
netbootSCPBL=OptionalProperties
nonSecurityMemberBL=OptionalProperties
objectGUID=OptionalProperties
objectVersion=OptionalProperties
otherWellKnownObjects=OptionalProperties
ownerBL=OptionalProperties
partialAttributeDeletionList=OptionalProperties
partialAttributeSet=OptionalProperties
possibleInferiors=OptionalProperties
proxiedObjectName=OptionalProperties
proxyAddresses=OptionalProperties
queryPolicyBL=OptionalProperties
replPropertyMetaData=OptionalProperties
replUpToDateVector=OptionalProperties
repsFrom=OptionalProperties
repsTo=OptionalProperties
revision=OptionalProperties
sDRightsEffective=OptionalProperties
serverReferenceBL=OptionalProperties
showInAdvancedViewOnly=OptionalProperties
siteObjectBL=OptionalProperties
structuralObjectClass=OptionalProperties
subRefs=OptionalProperties
subSchemaSubEntry=OptionalProperties
systemFlags=OptionalProperties
url=OptionalProperties
uSNChanged=OptionalProperties
uSNCreated=OptionalProperties
uSNDSALastObjRemoved=OptionalProperties
USNIntersite=OptionalProperties
uSNLastObjRem=OptionalProperties
uSNSource=OptionalProperties
wbemPath=OptionalProperties
wellKnownObjects=OptionalProperties
whenChanged=OptionalProperties
whenCreated=OptionalProperties
wWWHomePage=OptionalProperties


_raw:
11/05/2025 12:17:31.384
dcName=LDAP://APT-DC-01.allports.local/
admonEventType=schema
className=msDS-ShadowPrincipalContainer
classCN=ms-DS-Shadow-Principal-Container
cn=MandatoryProperties
instanceType=MandatoryProperties
nTSecurityDescriptor=MandatoryProperties
objectCategory=MandatoryProperties
objectClass=MandatoryProperties
cn=OptionalProperties
instanceType=OptionalProperties
nTSecurityDescriptor=OptionalProperties
objectCategory=OptionalProperties
objectClass=OptionalProperties
adminDescription=OptionalProperties
adminDisplayName=OptionalProperties
allowedAttributes=OptionalProperties
allowedAttributesEffective=OptionalProperties
allowedChildClasses=OptionalProperties
allowedChildClassesEffective=OptionalProperties
bridgeheadServerListBL=OptionalProperties
canonicalName=OptionalProperties
createTimeStamp=OptionalProperties
defaultClassStore=OptionalProperties
description=OptionalProperties
directReports=OptionalProperties
displayName=OptionalProperties
displayNamePrintable=OptionalProperties
distinguishedName=OptionalProperties
dSASignature=OptionalProperties
dSCorePropagationData=OptionalProperties
extensionName=OptionalProperties
flags=OptionalProperties
fromEntry=OptionalProperties
frsComputerReferenceBL=OptionalProperties
fRSMemberReferenceBL=OptionalProperties
fSMORoleOwner=OptionalProperties
isCriticalSystemObject=OptionalProperties
isDeleted=OptionalProperties
isPrivilegeHolder=OptionalProperties
isRecycled=OptionalProperties
lastKnownParent=OptionalProperties
managedObjects=OptionalProperties
masteredBy=OptionalProperties
memberOf=OptionalProperties
modifyTimeStamp=OptionalProperties
mS-DS-ConsistencyChildCount=OptionalProperties
mS-DS-ConsistencyGuid=OptionalProperties
msCOM-PartitionSetLink=OptionalProperties
msCOM-UserLink=OptionalProperties
msDFSR-ComputerReferenceBL=OptionalProperties
msDFSR-MemberReferenceBL=OptionalProperties
msDS-Approx-Immed-Subordinates=OptionalProperties
msDS-AuthenticatedToAccountlist=OptionalProperties
msDS-ClaimSharesPossibleValuesWithBL=OptionalProperties
msDS-CloudAnchor=OptionalProperties
msDS-EnabledFeatureBL=OptionalProperties
msDS-HostServiceAccountBL=OptionalProperties
msDS-IsDomainFor=OptionalProperties
msDS-IsFullReplicaFor=OptionalProperties
msDS-IsPartialReplicaFor=OptionalProperties
msDS-IsPrimaryComputerFor=OptionalProperties
msDS-KrbTgtLinkBl=OptionalProperties
msDS-LastKnownRDN=OptionalProperties
msDS-LocalEffectiveDeletionTime=OptionalProperties
msDS-LocalEffectiveRecycleTime=OptionalProperties
msDs-masteredBy=OptionalProperties
msds-memberOfTransitive=OptionalProperties
msDS-MembersForAzRoleBL=OptionalProperties
msDS-MembersOfResourcePropertyListBL=OptionalProperties
msds-memberTransitive=OptionalProperties
msDS-NC-RO-Replica-Locations-BL=OptionalProperties
msDS-NCReplCursors=OptionalProperties
msDS-NCReplInboundNeighbors=OptionalProperties
msDS-NCReplOutboundNeighbors=OptionalProperties
msDS-NcType=OptionalProperties
msDS-NonMembersBL=OptionalProperties
msDS-ObjectReference=OptionalProperties
msDS-ObjectReferenceBL=OptionalProperties
msDS-ObjectSoa=OptionalProperties
msDS-OIDToGroupLinkBl=OptionalProperties
msDS-OperationsForAzRoleBL=OptionalProperties
msDS-OperationsForAzTaskBL=OptionalProperties
msDS-parentdistname=OptionalProperties
msDS-PrincipalName=OptionalProperties
msDS-PSOApplied=OptionalProperties
msDS-ReplAttributeMetaData=OptionalProperties
msDS-ReplValueMetaData=OptionalProperties
msDS-ReplValueMetaDataExt=OptionalProperties
msDS-RevealedDSAs=OptionalProperties
msDS-RevealedListBL=OptionalProperties
msDS-SourceAnchor=OptionalProperties
msDS-TasksForAzRoleBL=OptionalProperties
msDS-TasksForAzTaskBL=OptionalProperties
msDS-TDOEgressBL=OptionalProperties
msDS-TDOIngressBL=OptionalProperties
msDS-ValueTypeReferenceBL=OptionalProperties
msSFU30PosixMemberOf=OptionalProperties
name=OptionalProperties
netbootSCPBL=OptionalProperties
nonSecurityMemberBL=OptionalProperties
objectGUID=OptionalProperties
objectVersion=OptionalProperties
otherWellKnownObjects=OptionalProperties
ownerBL=OptionalProperties
partialAttributeDeletionList=OptionalProperties
partialAttributeSet=OptionalProperties
possibleInferiors=OptionalProperties
proxiedObjectName=OptionalProperties
proxyAddresses=OptionalProperties
queryPolicyBL=OptionalProperties
replPropertyMetaData=OptionalProperties
replUpToDateVector=OptionalProperties
repsFrom=OptionalProperties
repsTo=OptionalProperties
revision=OptionalProperties
schemaVersion=OptionalProperties
sDRightsEffective=OptionalProperties
serverReferenceBL=OptionalProperties
showInAdvancedViewOnly=OptionalProperties
siteObjectBL=OptionalProperties
structuralObjectClass=OptionalProperties
subRefs=OptionalProperties
subSchemaSubEntry=OptionalProperties
systemFlags=OptionalProperties
url=OptionalProperties
uSNChanged=OptionalProperties
uSNCreated=OptionalProperties
uSNDSALastObjRemoved=OptionalProperties
USNIntersite=OptionalProperties
uSNLastObjRem=OptionalProperties
uSNSource=OptionalProperties
wbemPath=OptionalProperties
wellKnownObjects=OptionalProperties
whenChanged=OptionalProperties
whenCreated=OptionalProperties
wWWHomePage=OptionalProperties


_raw:
11/05/2025 12:17:31.384
dcName=LDAP://APT-DC-01.allports.local/
admonEventType=schema
className=msDS-KeyCredential
classCN=ms-DS-Key-Credential
instanceType=MandatoryProperties
msDS-KeyId=MandatoryProperties
nTSecurityDescriptor=MandatoryProperties
objectCategory=MandatoryProperties
objectClass=MandatoryProperties
instanceType=OptionalProperties
msDS-KeyId=OptionalProperties
nTSecurityDescriptor=OptionalProperties
objectCategory=OptionalProperties
objectClass=OptionalProperties
adminDescription=OptionalProperties
adminDisplayName=OptionalProperties
allowedAttributes=OptionalProperties
allowedAttributesEffective=OptionalProperties
allowedChildClasses=OptionalProperties
allowedChildClassesEffective=OptionalProperties
bridgeheadServerListBL=OptionalProperties
canonicalName=OptionalProperties
cn=OptionalProperties
createTimeStamp=OptionalProperties
description=OptionalProperties
directReports=OptionalProperties
displayName=OptionalProperties
displayNamePrintable=OptionalProperties
distinguishedName=OptionalProperties
dSASignature=OptionalProperties
dSCorePropagationData=OptionalProperties
extensionName=OptionalProperties
flags=OptionalProperties
fromEntry=OptionalProperties
frsComputerReferenceBL=OptionalProperties
fRSMemberReferenceBL=OptionalProperties
fSMORoleOwner=OptionalProperties
isCriticalSystemObject=OptionalProperties
isDeleted=OptionalProperties
isPrivilegeHolder=OptionalProperties
isRecycled=OptionalProperties
lastKnownParent=OptionalProperties
managedObjects=OptionalProperties
masteredBy=OptionalProperties
memberOf=OptionalProperties
modifyTimeStamp=OptionalProperties
mS-DS-ConsistencyChildCount=OptionalProperties
mS-DS-ConsistencyGuid=OptionalProperties
msCOM-PartitionSetLink=OptionalProperties
msCOM-UserLink=OptionalProperties
msDFSR-ComputerReferenceBL=OptionalProperties
msDFSR-MemberReferenceBL=OptionalProperties
msDS-Approx-Immed-Subordinates=OptionalProperties
msDS-AuthenticatedToAccountlist=OptionalProperties
msDS-ClaimSharesPossibleValuesWithBL=OptionalProperties
msDS-CloudAnchor=OptionalProperties
msDS-ComputerSID=OptionalProperties
msDS-CustomKeyInformation=OptionalProperties
msDS-DeviceDN=OptionalProperties
msDS-DeviceID=OptionalProperties
msDS-EnabledFeatureBL=OptionalProperties
msDS-HostServiceAccountBL=OptionalProperties
msDS-IsDomainFor=OptionalProperties
msDS-IsFullReplicaFor=OptionalProperties
msDS-IsPartialReplicaFor=OptionalProperties
msDS-IsPrimaryComputerFor=OptionalProperties
msDS-KeyApproximateLastLogonTimeStamp=OptionalProperties
msDS-KeyMaterial=OptionalProperties
msDS-KeyPrincipal=OptionalProperties
msDS-KeyUsage=OptionalProperties
msDS-KrbTgtLinkBl=OptionalProperties
msDS-LastKnownRDN=OptionalProperties
msDS-LocalEffectiveDeletionTime=OptionalProperties
msDS-LocalEffectiveRecycleTime=OptionalProperties
msDs-masteredBy=OptionalProperties
msds-memberOfTransitive=OptionalProperties
msDS-MembersForAzRoleBL=OptionalProperties
msDS-MembersOfResourcePropertyListBL=OptionalProperties
msds-memberTransitive=OptionalProperties
msDS-NC-RO-Replica-Locations-BL=OptionalProperties
msDS-NCReplCursors=OptionalProperties
msDS-NCReplInboundNeighbors=OptionalProperties
msDS-NCReplOutboundNeighbors=OptionalProperties
msDS-NcType=OptionalProperties
msDS-NonMembersBL=OptionalProperties
msDS-ObjectReferenceBL=OptionalProperties
msDS-ObjectSoa=OptionalProperties
msDS-OIDToGroupLinkBl=OptionalProperties
msDS-OperationsForAzRoleBL=OptionalProperties
msDS-OperationsForAzTaskBL=OptionalProperties
msDS-parentdistname=OptionalProperties
msDS-PrincipalName=OptionalProperties
msDS-PSOApplied=OptionalProperties
msDS-ReplAttributeMetaData=OptionalProperties
msDS-ReplValueMetaData=OptionalProperties
msDS-ReplValueMetaDataExt=OptionalProperties
msDS-RevealedDSAs=OptionalProperties
msDS-RevealedListBL=OptionalProperties
msDS-SourceAnchor=OptionalProperties
msDS-TasksForAzRoleBL=OptionalProperties
msDS-TasksForAzTaskBL=OptionalProperties
msDS-TDOEgressBL=OptionalProperties
msDS-TDOIngressBL=OptionalProperties
msDS-ValueTypeReferenceBL=OptionalProperties
msSFU30PosixMemberOf=OptionalProperties
name=OptionalProperties
netbootSCPBL=OptionalProperties
nonSecurityMemberBL=OptionalProperties
objectGUID=OptionalProperties
objectVersion=OptionalProperties
otherWellKnownObjects=OptionalProperties
ownerBL=OptionalProperties
partialAttributeDeletionList=OptionalProperties
partialAttributeSet=OptionalProperties
possibleInferiors=OptionalProperties
proxiedObjectName=OptionalProperties
proxyAddresses=OptionalProperties
queryPolicyBL=OptionalProperties
replPropertyMetaData=OptionalProperties
replUpToDateVector=OptionalProperties
repsFrom=OptionalProperties
repsTo=OptionalProperties
revision=OptionalProperties
sDRightsEffective=OptionalProperties
serverReferenceBL=OptionalProperties
showInAdvancedViewOnly=OptionalProperties
siteObjectBL=OptionalProperties
structuralObjectClass=OptionalProperties
subRefs=OptionalProperties
subSchemaSubEntry=OptionalProperties
systemFlags=OptionalProperties
url=OptionalProperties
uSNChanged=OptionalProperties
uSNCreated=OptionalProperties
uSNDSALastObjRemoved=OptionalProperties
USNIntersite=OptionalProperties
uSNLastObjRem=OptionalProperties
uSNSource=OptionalProperties
wbemPath=OptionalProperties
wellKnownObjects=OptionalProperties
whenChanged=OptionalProperties
whenCreated=OptionalProperties
wWWHomePage=OptionalProperties


_raw:
11/05/2025 12:17:31.384
dcName=LDAP://APT-DC-01.allports.local/
admonEventType=schema
className=msDS-AuthNPolicy
classCN=ms-DS-AuthN-Policy
instanceType=MandatoryProperties
nTSecurityDescriptor=MandatoryProperties
objectCategory=MandatoryProperties
objectClass=MandatoryProperties
instanceType=OptionalProperties
nTSecurityDescriptor=OptionalProperties
objectCategory=OptionalProperties
objectClass=OptionalProperties
adminDescription=OptionalProperties
adminDisplayName=OptionalProperties
allowedAttributes=OptionalProperties
allowedAttributesEffective=OptionalProperties
allowedChildClasses=OptionalProperties
allowedChildClassesEffective=OptionalProperties
bridgeheadServerListBL=OptionalProperties
canonicalName=OptionalProperties
cn=OptionalProperties
createTimeStamp=OptionalProperties
description=OptionalProperties
directReports=OptionalProperties
displayName=OptionalProperties
displayNamePrintable=OptionalProperties
distinguishedName=OptionalProperties
dSASignature=OptionalProperties
dSCorePropagationData=OptionalProperties
extensionName=OptionalProperties
flags=OptionalProperties
fromEntry=OptionalProperties
frsComputerReferenceBL=OptionalProperties
fRSMemberReferenceBL=OptionalProperties
fSMORoleOwner=OptionalProperties
isCriticalSystemObject=OptionalProperties
isDeleted=OptionalProperties
isPrivilegeHolder=OptionalProperties
isRecycled=OptionalProperties
lastKnownParent=OptionalProperties
managedObjects=OptionalProperties
masteredBy=OptionalProperties
memberOf=OptionalProperties
modifyTimeStamp=OptionalProperties
mS-DS-ConsistencyChildCount=OptionalProperties
mS-DS-ConsistencyGuid=OptionalProperties
msCOM-PartitionSetLink=OptionalProperties
msCOM-UserLink=OptionalProperties
msDFSR-ComputerReferenceBL=OptionalProperties
msDFSR-MemberReferenceBL=OptionalProperties
msDS-Approx-Immed-Subordinates=OptionalProperties
msDS-AssignedAuthNPolicyBL=OptionalProperties
msDS-AuthenticatedToAccountlist=OptionalProperties
msDS-AuthNPolicyEnforced=OptionalProperties
msDS-ClaimSharesPossibleValuesWithBL=OptionalProperties
msDS-CloudAnchor=OptionalProperties
msDS-ComputerAllowedToAuthenticateTo=OptionalProperties
msDS-ComputerAuthNPolicyBL=OptionalProperties
msDS-ComputerTGTLifetime=OptionalProperties
msDS-EnabledFeatureBL=OptionalProperties
msDS-HostServiceAccountBL=OptionalProperties
msDS-IsDomainFor=OptionalProperties
msDS-IsFullReplicaFor=OptionalProperties
msDS-IsPartialReplicaFor=OptionalProperties
msDS-IsPrimaryComputerFor=OptionalProperties
msDS-KrbTgtLinkBl=OptionalProperties
msDS-LastKnownRDN=OptionalProperties
msDS-LocalEffectiveDeletionTime=OptionalProperties
msDS-LocalEffectiveRecycleTime=OptionalProperties
msDs-masteredBy=OptionalProperties
msds-memberOfTransitive=OptionalProperties
msDS-MembersForAzRoleBL=OptionalProperties
msDS-MembersOfResourcePropertyListBL=OptionalProperties
msds-memberTransitive=OptionalProperties
msDS-NC-RO-Replica-Locations-BL=OptionalProperties
msDS-NCReplCursors=OptionalProperties
msDS-NCReplInboundNeighbors=OptionalProperties
msDS-NCReplOutboundNeighbors=OptionalProperties
msDS-NcType=OptionalProperties
msDS-NonMembersBL=OptionalProperties
msDS-ObjectReferenceBL=OptionalProperties
msDS-ObjectSoa=OptionalProperties
msDS-OIDToGroupLinkBl=OptionalProperties
msDS-OperationsForAzRoleBL=OptionalProperties
msDS-OperationsForAzTaskBL=OptionalProperties
msDS-parentdistname=OptionalProperties
msDS-PrincipalName=OptionalProperties
msDS-PSOApplied=OptionalProperties
msDS-ReplAttributeMetaData=OptionalProperties
msDS-ReplValueMetaData=OptionalProperties
msDS-ReplValueMetaDataExt=OptionalProperties
msDS-RevealedDSAs=OptionalProperties
msDS-RevealedListBL=OptionalProperties
msDS-ServiceAllowedNTLMNetworkAuthentication=OptionalProperties
msDS-ServiceAllowedToAuthenticateFrom=OptionalProperties
msDS-ServiceAllowedToAuthenticateTo=OptionalProperties
msDS-ServiceAuthNPolicyBL=OptionalProperties
msDS-ServiceTGTLifetime=OptionalProperties
msDS-SourceAnchor=OptionalProperties
msDS-StrongNTLMPolicy=OptionalProperties
msDS-TasksForAzRoleBL=OptionalProperties
msDS-TasksForAzTaskBL=OptionalProperties
msDS-TDOEgressBL=OptionalProperties
msDS-TDOIngressBL=OptionalProperties
msDS-UserAllowedNTLMNetworkAuthentication=OptionalProperties
msDS-UserAllowedToAuthenticateFrom=OptionalProperties
msDS-UserAllowedToAuthenticateTo=OptionalProperties
msDS-UserAuthNPolicyBL=OptionalProperties
msDS-UserTGTLifetime=OptionalProperties
msDS-ValueTypeReferenceBL=OptionalProperties
msSFU30PosixMemberOf=OptionalProperties
name=OptionalProperties
netbootSCPBL=OptionalProperties
nonSecurityMemberBL=OptionalProperties
objectGUID=OptionalProperties
objectVersion=OptionalProperties
otherWellKnownObjects=OptionalProperties
ownerBL=OptionalProperties
partialAttributeDeletionList=OptionalProperties
partialAttributeSet=OptionalProperties
possibleInferiors=OptionalProperties
proxiedObjectName=OptionalProperties
proxyAddresses=OptionalProperties
queryPolicyBL=OptionalProperties
replPropertyMetaData=OptionalProperties
replUpToDateVector=OptionalProperties
repsFrom=OptionalProperties
repsTo=OptionalProperties
revision=OptionalProperties
sDRightsEffective=OptionalProperties
serverReferenceBL=OptionalProperties
showInAdvancedViewOnly=OptionalProperties
siteObjectBL=OptionalProperties
structuralObjectClass=OptionalProperties
subRefs=OptionalProperties
subSchemaSubEntry=OptionalProperties
systemFlags=OptionalProperties
url=OptionalProperties
uSNChanged=OptionalProperties
uSNCreated=OptionalProperties
uSNDSALastObjRemoved=OptionalProperties
USNIntersite=OptionalProperties
uSNLastObjRem=OptionalProperties
uSNSource=OptionalProperties
wbemPath=OptionalProperties
wellKnownObjects=OptionalProperties
whenChanged=OptionalProperties
whenCreated=OptionalProperties
wWWHomePage=OptionalProperties


_raw:
11/05/2025 12:17:31.384
dcName=LDAP://APT-DC-01.allports.local/
admonEventType=schema
className=msDS-AuthNPolicySilo
classCN=ms-DS-AuthN-Policy-Silo
instanceType=MandatoryProperties
nTSecurityDescriptor=MandatoryProperties
objectCategory=MandatoryProperties
objectClass=MandatoryProperties
instanceType=OptionalProperties
nTSecurityDescriptor=OptionalProperties
objectCategory=OptionalProperties
objectClass=OptionalProperties
adminDescription=OptionalProperties
adminDisplayName=OptionalProperties
allowedAttributes=OptionalProperties
allowedAttributesEffective=OptionalProperties
allowedChildClasses=OptionalProperties
allowedChildClassesEffective=OptionalProperties
bridgeheadServerListBL=OptionalProperties
canonicalName=OptionalProperties
cn=OptionalProperties
createTimeStamp=OptionalProperties
description=OptionalProperties
directReports=OptionalProperties
displayName=OptionalProperties
displayNamePrintable=OptionalProperties
distinguishedName=OptionalProperties
dSASignature=OptionalProperties
dSCorePropagationData=OptionalProperties
extensionName=OptionalProperties
flags=OptionalProperties
fromEntry=OptionalProperties
frsComputerReferenceBL=OptionalProperties
fRSMemberReferenceBL=OptionalProperties
fSMORoleOwner=OptionalProperties
isCriticalSystemObject=OptionalProperties
isDeleted=OptionalProperties
isPrivilegeHolder=OptionalProperties
isRecycled=OptionalProperties
lastKnownParent=OptionalProperties
managedObjects=OptionalProperties
masteredBy=OptionalProperties
memberOf=OptionalProperties
modifyTimeStamp=OptionalProperties
mS-DS-ConsistencyChildCount=OptionalProperties
mS-DS-ConsistencyGuid=OptionalProperties
msCOM-PartitionSetLink=OptionalProperties
msCOM-UserLink=OptionalProperties
msDFSR-ComputerReferenceBL=OptionalProperties
msDFSR-MemberReferenceBL=OptionalProperties
msDS-Approx-Immed-Subordinates=OptionalProperties
msDS-AssignedAuthNPolicySiloBL=OptionalProperties
msDS-AuthenticatedToAccountlist=OptionalProperties
msDS-AuthNPolicySiloEnforced=OptionalProperties
msDS-AuthNPolicySiloMembers=OptionalProperties
msDS-ClaimSharesPossibleValuesWithBL=OptionalProperties
msDS-CloudAnchor=OptionalProperties
msDS-ComputerAuthNPolicy=OptionalProperties
msDS-EnabledFeatureBL=OptionalProperties
msDS-HostServiceAccountBL=OptionalProperties
msDS-IsDomainFor=OptionalProperties
msDS-IsFullReplicaFor=OptionalProperties
msDS-IsPartialReplicaFor=OptionalProperties
msDS-IsPrimaryComputerFor=OptionalProperties
msDS-KrbTgtLinkBl=OptionalProperties
msDS-LastKnownRDN=OptionalProperties
msDS-LocalEffectiveDeletionTime=OptionalProperties
msDS-LocalEffectiveRecycleTime=OptionalProperties
msDs-masteredBy=OptionalProperties
msds-memberOfTransitive=OptionalProperties
msDS-MembersForAzRoleBL=OptionalProperties
msDS-MembersOfResourcePropertyListBL=OptionalProperties
msds-memberTransitive=OptionalProperties
msDS-NC-RO-Replica-Locations-BL=OptionalProperties
msDS-NCReplCursors=OptionalProperties
msDS-NCReplInboundNeighbors=OptionalProperties
msDS-NCReplOutboundNeighbors=OptionalProperties
msDS-NcType=OptionalProperties
msDS-NonMembersBL=OptionalProperties
msDS-ObjectReferenceBL=OptionalProperties
msDS-ObjectSoa=OptionalProperties
msDS-OIDToGroupLinkBl=OptionalProperties
msDS-OperationsForAzRoleBL=OptionalProperties
msDS-OperationsForAzTaskBL=OptionalProperties
msDS-parentdistname=OptionalProperties
msDS-PrincipalName=OptionalProperties
msDS-PSOApplied=OptionalProperties
msDS-ReplAttributeMetaData=OptionalProperties
msDS-ReplValueMetaData=OptionalProperties
msDS-ReplValueMetaDataExt=OptionalProperties
msDS-RevealedDSAs=OptionalProperties
msDS-RevealedListBL=OptionalProperties
msDS-ServiceAuthNPolicy=OptionalProperties
msDS-SourceAnchor=OptionalProperties
msDS-TasksForAzRoleBL=OptionalProperties
msDS-TasksForAzTaskBL=OptionalProperties
msDS-TDOEgressBL=OptionalProperties
msDS-TDOIngressBL=OptionalProperties
msDS-UserAuthNPolicy=OptionalProperties
msDS-ValueTypeReferenceBL=OptionalProperties
msSFU30PosixMemberOf=OptionalProperties
name=OptionalProperties
netbootSCPBL=OptionalProperties
nonSecurityMemberBL=OptionalProperties
objectGUID=OptionalProperties
objectVersion=OptionalProperties
otherWellKnownObjects=OptionalProperties
ownerBL=OptionalProperties
partialAttributeDeletionList=OptionalProperties
partialAttributeSet=OptionalProperties
possibleInferiors=OptionalProperties
proxiedObjectName=OptionalProperties
proxyAddresses=OptionalProperties
queryPolicyBL=OptionalProperties
replPropertyMetaData=OptionalProperties
replUpToDateVector=OptionalProperties
repsFrom=OptionalProperties
repsTo=OptionalProperties
revision=OptionalProperties
sDRightsEffective=OptionalProperties
serverReferenceBL=OptionalProperties
showInAdvancedViewOnly=OptionalProperties
siteObjectBL=OptionalProperties
structuralObjectClass=OptionalProperties
subRefs=OptionalProperties
subSchemaSubEntry=OptionalProperties
systemFlags=OptionalProperties
url=OptionalProperties
uSNChanged=OptionalProperties
uSNCreated=OptionalProperties
uSNDSALastObjRemoved=OptionalProperties
USNIntersite=OptionalProperties
uSNLastObjRem=OptionalProperties
uSNSource=OptionalProperties
wbemPath=OptionalProperties
wellKnownObjects=OptionalProperties
whenChanged=OptionalProperties
whenCreated=OptionalProperties
wWWHomePage=OptionalProperties