_raw:
11/05/2025 09:35:23.611
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Eleanor Moore
	distinguishedName=CN=Eleanor Moore,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Eleanor
	sn=Moore
	cn=Eleanor Moore
Object Details:
	sAMAccountType=805306368
	sAMAccountName=emoore
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-395780846-2900486417-2078828075-2661
	primaryGroupID=513
	pwdLastSet=09:24.24 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=bcffdf1d-d58b-4ddc-94f6-3f74d4762f22
	whenChanged=09:35.23 AM, Wed 11/05/2025
	whenCreated=09:24.24 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=29999
	uSNCreated=22170
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=212 James Vista, Porterport, NH 76563
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 09:35:23.611
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Enterprise Key Admins
	distinguishedName=CN=Enterprise Key Admins,CN=Users,DC=allports,DC=local
	cn=Enterprise Key Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Enterprise Key Admins
	objectSid=S-1-5-21-395780846-2900486417-2078828075-527
	objectGUID=ebcade1d-e8b6-4324-be32-58b19f69212e
	whenChanged=09:35.23 AM, Wed 11/05/2025
	whenCreated=09:20.12 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=29997
	uSNCreated=12453
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105142012.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483640
	adminCount=1
	description=Members of this group can perform administrative actions on key objects within the forest.

_sourcetype: ActiveDirectory

source: ActiveDirectory

sourcetype: ActiveDirectory


_raw:
11/05/2025 09:35:23.611
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=David Carter
	distinguishedName=CN=David Carter,OU=Executive,OU=Departments,DC=allports,DC=local
	givenName=David
	sn=Carter
	cn=David Carter
Object Details:
	sAMAccountType=805306368
	sAMAccountName=dcarter
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-395780846-2900486417-2078828075-3329
	primaryGroupID=513
	pwdLastSet=09:25.04 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=54485118-80e5-4261-9992-d1e364fe0b9f
	whenChanged=09:35.23 AM, Wed 11/05/2025
	whenCreated=09:25.04 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=29996
	uSNCreated=26189
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=80034 Stark Walks Apt. 756, Mcdanielberg, WY 73366
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Co-Founder & CEO


_raw:
11/05/2025 09:35:23.611
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Isabella Clark
	distinguishedName=CN=Isabella Clark,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Isabella
	sn=Clark
	cn=Isabella Clark
Object Details:
	sAMAccountType=805306368
	sAMAccountName=iclark1
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-395780846-2900486417-2078828075-3155
	primaryGroupID=513
	pwdLastSet=09:24.53 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=c656be15-ac12-446b-b324-6b9b945e0ef3
	whenChanged=09:35.23 AM, Wed 11/05/2025
	whenCreated=09:24.53 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=29994
	uSNCreated=25142
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=8686 Rachel Fords, Port Jason, NE 94930
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 09:35:23.611
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Nora Nelson
	distinguishedName=CN=Nora Nelson,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Nora
	sn=Nelson
	cn=Nora Nelson
Object Details:
	sAMAccountType=805306368
	sAMAccountName=nnelson
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-395780846-2900486417-2078828075-1510
	primaryGroupID=513
	pwdLastSet=09:23.15 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=89a61509-a5e6-4390-a95e-e616c63e7782
	whenChanged=09:35.23 AM, Wed 11/05/2025
	whenCreated=09:23.15 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=29992
	uSNCreated=15233
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=886 Alexander Ridges Suite 360, West William, OK 83863
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 09:35:23.532
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Container,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=AdminSDHolder
	distinguishedName=CN=AdminSDHolder,CN=System,DC=allports,DC=local
	cn=AdminSDHolder
Object Details:
	objectGUID=344dfb44-d5bf-4594-9d55-c25f0ca8e96a
	whenChanged=09:35.23 AM, Wed 11/05/2025
	whenCreated=09:19.07 AM, Wed 11/05/2025
	objectClass=top|container
Event Details:
	uSNChanged=29990
	uSNCreated=5704
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105142012.0Z|16010101000000.0Z
	isCriticalSystemObject=TRUE
	systemFlags=-1946157056
	showInAdvancedViewOnly=TRUE


_raw:
11/05/2025 09:34:25.790
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Domain Controllers
	distinguishedName=CN=Domain Controllers,CN=Users,DC=allports,DC=local
	cn=Domain Controllers
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Domain Controllers
	objectSid=S-1-5-21-209391130-3880317083-1643281405-516
	objectGUID=8d3487e8-3571-49b9-95ec-00eb03efef5b
	whenChanged=09:34.25 AM, Wed 11/05/2025
	whenCreated=09:19.14 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30058
	uSNCreated=12333
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141914.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483646
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local
	description=All domain controllers in the domain


_raw:
11/05/2025 09:34:25.790
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Read-only Domain Controllers
	distinguishedName=CN=Read-only Domain Controllers,CN=Users,DC=allports,DC=local
	cn=Read-only Domain Controllers
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Read-only Domain Controllers
	objectSid=S-1-5-21-209391130-3880317083-1643281405-521
	objectGUID=829ff9df-0cb2-4bdf-b979-9ab1560d29fd
	whenChanged=09:34.25 AM, Wed 11/05/2025
	whenCreated=09:19.14 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30057
	uSNCreated=12419
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141914.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483646
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local
	description=Members of this group are Read-Only Domain Controllers in the domain


_raw:
11/05/2025 09:34:25.790
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=krbtgt
	distinguishedName=CN=krbtgt,CN=Users,DC=allports,DC=local
	cn=krbtgt
Object Details:
	sAMAccountType=805306368
	sAMAccountName=krbtgt
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-209391130-3880317083-1643281405-502
	primaryGroupID=513
	pwdLastSet=09:19.14 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=514
	objectGUID=6261b3a6-3f02-4e8b-be8d-75658683d3bc
	whenChanged=09:34.25 AM, Wed 11/05/2025
	whenCreated=09:19.14 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30056
	uSNCreated=12324
	instanceType=4
Additional Details:
	msDS-SupportedEncryptionTypes=0
	dSCorePropagationData=20251105141914.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	servicePrincipalName=kadmin/changepw
	adminCount=1
	showInAdvancedViewOnly=TRUE
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local
	description=Key Distribution Center Service Account


_raw:
11/05/2025 09:34:25.774
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Replicator
	distinguishedName=CN=Replicator,CN=Builtin,DC=allports,DC=local
	cn=Replicator
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Replicator
	objectSid=S-1-5-32-552
	objectGUID=cac9c0dc-490d-4f00-a52e-a26373a08e7b
	whenChanged=09:34.25 AM, Wed 11/05/2025
	whenCreated=09:18.14 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30054
	uSNCreated=8217
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141914.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Supports file replication in a domain


_raw:
11/05/2025 09:34:25.774
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Print Operators
	distinguishedName=CN=Print Operators,CN=Builtin,DC=allports,DC=local
	cn=Print Operators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Print Operators
	objectSid=S-1-5-32-550
	objectGUID=eb98aaac-f874-4ebf-9ac4-000fcb9c101b
	whenChanged=09:34.25 AM, Wed 11/05/2025
	whenCreated=09:18.14 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30052
	uSNCreated=8215
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141914.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Members can administer printers installed on domain controllers


_raw:
11/05/2025 09:34:25.774
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Server Operators
	distinguishedName=CN=Server Operators,CN=Builtin,DC=allports,DC=local
	cn=Server Operators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Server Operators
	objectSid=S-1-5-32-549
	objectGUID=2492129b-73f4-4642-9be4-f7ff5eb13997
	whenChanged=09:34.25 AM, Wed 11/05/2025
	whenCreated=09:19.14 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30050
	uSNCreated=12360
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141914.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Members can administer domain servers


_raw:
11/05/2025 09:34:25.759
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Backup Operators
	distinguishedName=CN=Backup Operators,CN=Builtin,DC=allports,DC=local
	cn=Backup Operators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Backup Operators
	objectSid=S-1-5-32-551
	objectGUID=0aa9367c-a1bd-4cf1-a9d2-d4a983ac9176
	whenChanged=09:34.25 AM, Wed 11/05/2025
	whenCreated=09:18.14 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30049
	uSNCreated=8216
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141914.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Backup Operators can override security restrictions for the sole purpose of backing up or restoring files


_raw:
11/05/2025 09:34:25.759
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Account Operators
	distinguishedName=CN=Account Operators,CN=Builtin,DC=allports,DC=local
	cn=Account Operators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Account Operators
	objectSid=S-1-5-32-548
	objectGUID=04da9a69-29d1-4774-8409-45eebd9eeecc
	whenChanged=09:34.25 AM, Wed 11/05/2025
	whenCreated=09:19.14 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30047
	uSNCreated=12363
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141914.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Members can administer domain user and group accounts


_raw:
11/05/2025 09:34:25.759
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Administrators
	distinguishedName=CN=Administrators,CN=Builtin,DC=allports,DC=local
	cn=Administrators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Administrators
	objectSid=S-1-5-32-544
	objectGUID=dac6fe19-fb4d-4283-9db0-9e8ee25b9711
	whenChanged=09:34.25 AM, Wed 11/05/2025
	whenCreated=09:18.14 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30046
	uSNCreated=8201
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141914.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	member=CN=Domain Admins,CN=Users,DC=allports,DC=local|CN=Enterprise Admins,CN=Users,DC=allports,DC=local|CN=Admin,CN=Users,DC=allports,DC=local|CN=cloudbase-init,CN=Users,DC=allports,DC=local|CN=Administrator,CN=Users,DC=allports,DC=local
	description=Administrators have complete and unrestricted access to the computer/domain


_raw:
11/05/2025 09:34:25.759
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Sarah Hill
	distinguishedName=CN=Sarah Hill,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Sarah
	sn=Hill
	cn=Sarah Hill
Object Details:
	sAMAccountType=805306368
	sAMAccountName=shill
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-209391130-3880317083-1643281405-3089
	primaryGroupID=513
	pwdLastSet=09:23.53 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=dce904ee-eadd-4372-86c0-892307ed0b1e
	whenChanged=09:34.25 AM, Wed 11/05/2025
	whenCreated=09:23.53 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30044
	uSNCreated=24744
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=837 Wolfe Street, Mitchellhaven, VT 83781
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 09:34:25.743
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Emily Carter
	distinguishedName=CN=Emily Carter,OU=Executive,OU=Departments,DC=allports,DC=local
	givenName=Emily
	sn=Carter
	cn=Emily Carter
Object Details:
	sAMAccountType=805306368
	sAMAccountName=ecarter
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-209391130-3880317083-1643281405-1106
	primaryGroupID=513
	pwdLastSet=09:21.53 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=20fa03e9-0cb0-458d-9f10-55db682e7b3a
	whenChanged=09:34.25 AM, Wed 11/05/2025
	whenCreated=09:21.53 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30042
	uSNCreated=12774
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=5325 Rogers Village, Lydiaport, KY 37558
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Co-Founder & COO


_raw:
11/05/2025 09:34:25.743
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Key Admins
	distinguishedName=CN=Key Admins,CN=Users,DC=allports,DC=local
	cn=Key Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Key Admins
	objectSid=S-1-5-21-209391130-3880317083-1643281405-526
	objectGUID=b5c42ce6-f5ee-4181-9952-b51bea933096
	whenChanged=09:34.25 AM, Wed 11/05/2025
	whenCreated=09:19.14 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30040
	uSNCreated=12450
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141914.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483646
	adminCount=1
	description=Members of this group can perform administrative actions on key objects within the domain.


_raw:
11/05/2025 09:34:25.743
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Enterprise Key Admins
	distinguishedName=CN=Enterprise Key Admins,CN=Users,DC=allports,DC=local
	cn=Enterprise Key Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Enterprise Key Admins
	objectSid=S-1-5-21-209391130-3880317083-1643281405-527
	objectGUID=aa18d8e2-db33-43e8-8f4b-489ed81ed052
	whenChanged=09:34.25 AM, Wed 11/05/2025
	whenCreated=09:19.14 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30039
	uSNCreated=12453
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141914.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483640
	adminCount=1
	description=Members of this group can perform administrative actions on key objects within the forest.


_raw:
11/05/2025 09:34:25.743
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Kevin Miller
	distinguishedName=CN=Kevin Miller,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Kevin
	sn=Miller
	cn=Kevin Miller
Object Details:
	sAMAccountType=805306368
	sAMAccountName=kmiller
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-209391130-3880317083-1643281405-2444
	primaryGroupID=513
	pwdLastSet=09:23.14 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=479d34dd-3bca-486c-a29e-2430bd849ff7
	whenChanged=09:34.25 AM, Wed 11/05/2025
	whenCreated=09:23.14 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30038
	uSNCreated=20863
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=041 Ronnie Branch, Oconnellfort, WV 97644
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 09:34:25.743
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Admin
	displayName=Admin
	distinguishedName=CN=Admin,CN=Users,DC=allports,DC=local
	cn=Admin
Object Details:
	sAMAccountType=805306368
	sAMAccountName=Admin
	logonCount=1
	accountExpires=Never Expires
	objectSid=S-1-5-21-209391130-3880317083-1643281405-1001
	primaryGroupID=513
	pwdLastSet=09:08.15 AM, Wed 11/05/2025
	lastLogon=09:07.28 AM, Wed 11/05/2025
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=66048
	objectGUID=899bbfd8-e5ab-4867-a070-7f4c5f3b10c1
	whenChanged=09:34.25 AM, Wed 11/05/2025
	whenCreated=09:18.14 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30036
	uSNCreated=8199
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141914.0Z|16010101000001.0Z
	adminCount=1
	memberOf=CN=Administrators,CN=Builtin,DC=allports,DC=local


_raw:
11/05/2025 09:34:25.728
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Kai Hill
	distinguishedName=CN=Kai Hill,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Kai
	sn=Hill
	cn=Kai Hill
Object Details:
	sAMAccountType=805306368
	sAMAccountName=khill
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-209391130-3880317083-1643281405-1985
	primaryGroupID=513
	pwdLastSet=09:22.47 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=8bc918d7-f2af-489a-9b6b-0be7d5743c41
	whenChanged=09:34.25 AM, Wed 11/05/2025
	whenCreated=09:22.47 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30034
	uSNCreated=18095
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=20294 Fletcher Turnpike, Fostertown, DE 39758
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 09:34:25.728
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Nora Nelson
	distinguishedName=CN=Nora Nelson,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Nora
	sn=Nelson
	cn=Nora Nelson
Object Details:
	sAMAccountType=805306368
	sAMAccountName=nnelson
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-209391130-3880317083-1643281405-1510
	primaryGroupID=513
	pwdLastSet=09:22.18 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=8ff598c5-b059-4691-8917-f0cc2109e05c
	whenChanged=09:34.25 AM, Wed 11/05/2025
	whenCreated=09:22.18 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30032
	uSNCreated=15234
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=886 Alexander Ridges Suite 360, West William, OK 83863
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 09:34:25.728
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Logan Clark
	distinguishedName=CN=Logan Clark,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Logan
	sn=Clark
	cn=Logan Clark
Object Details:
	sAMAccountType=805306368
	sAMAccountName=lclark1
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-209391130-3880317083-1643281405-3751
	primaryGroupID=513
	pwdLastSet=09:24.32 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=af59f1c2-8f51-4809-a844-d02f8810a049
	whenChanged=09:34.25 AM, Wed 11/05/2025
	whenCreated=09:24.32 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30030
	uSNCreated=28742
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=29325 Rebecca Estate, Lake Ronald, CO 85102
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 09:34:25.728
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Michael Rivera
	distinguishedName=CN=Michael Rivera,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Michael
	sn=Rivera
	cn=Michael Rivera
Object Details:
	sAMAccountType=805306368
	sAMAccountName=mrivera1
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-209391130-3880317083-1643281405-3719
	primaryGroupID=513
	pwdLastSet=09:24.30 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=b64e3ec2-64b1-49f0-9ac7-651ca42c3d5c
	whenChanged=09:34.25 AM, Wed 11/05/2025
	whenCreated=09:24.30 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30028
	uSNCreated=28547
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=11949 Gray Meadows Apt. 897, Lindseyberg, NV 06447
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 09:34:25.728
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Axel White
	distinguishedName=CN=Axel White,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Axel
	sn=White
	cn=Axel White
Object Details:
	sAMAccountType=805306368
	sAMAccountName=awhite1
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-209391130-3880317083-1643281405-3866
	primaryGroupID=513
	pwdLastSet=09:24.39 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=9fc721ae-465b-4621-91e8-4fff175a83b2
	whenChanged=09:34.25 AM, Wed 11/05/2025
	whenCreated=09:24.39 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30026
	uSNCreated=29437
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=2130 David Mount, West Meganland, AZ 73217
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 09:34:25.712
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=David Carter
	distinguishedName=CN=David Carter,OU=Executive,OU=Departments,DC=allports,DC=local
	givenName=David
	sn=Carter
	cn=David Carter
Object Details:
	sAMAccountType=805306368
	sAMAccountName=dcarter
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-209391130-3880317083-1643281405-3329
	primaryGroupID=513
	pwdLastSet=09:24.07 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=f2ffbda4-ab08-4878-ac31-1ee667bd0eef
	whenChanged=09:34.25 AM, Wed 11/05/2025
	whenCreated=09:24.07 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30024
	uSNCreated=26190
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=80034 Stark Walks Apt. 756, Mcdanielberg, WY 73366
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Co-Founder & CEO


_raw:
11/05/2025 09:34:25.696
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Isabella Clark
	distinguishedName=CN=Isabella Clark,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Isabella
	sn=Clark
	cn=Isabella Clark
Object Details:
	sAMAccountType=805306368
	sAMAccountName=iclark1
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-209391130-3880317083-1643281405-3155
	primaryGroupID=513
	pwdLastSet=09:23.57 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=d597a293-1b75-44d0-8571-52e681f7a963
	whenChanged=09:34.25 AM, Wed 11/05/2025
	whenCreated=09:23.57 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30022
	uSNCreated=25143
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=8686 Rachel Fords, Port Jason, NE 94930
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 09:34:25.696
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Erick Smith
	distinguishedName=CN=Erick Smith,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Erick
	sn=Smith
	cn=Erick Smith
Object Details:
	sAMAccountType=805306368
	sAMAccountName=esmith
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-209391130-3880317083-1643281405-3646
	primaryGroupID=513
	pwdLastSet=09:24.26 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=f4966d91-3cd9-4f4c-96aa-1dd0dc1f84d4
	whenChanged=09:34.25 AM, Wed 11/05/2025
	whenCreated=09:24.26 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30020
	uSNCreated=28106
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=569 Carrie Route Apt. 586, Lake James, NV 94321
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 09:34:25.696
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=John Taylor
	distinguishedName=CN=John Taylor,OU=Executive,OU=Departments,DC=allports,DC=local
	givenName=John
	sn=Taylor
	cn=John Taylor
Object Details:
	sAMAccountType=805306368
	sAMAccountName=jtaylor
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-209391130-3880317083-1643281405-2402
	primaryGroupID=513
	pwdLastSet=09:23.12 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=d937f986-3256-4bd5-a055-52470af5f211
	whenChanged=09:34.25 AM, Wed 11/05/2025
	whenCreated=09:23.12 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30018
	uSNCreated=20605
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=80159 Rebekah Tunnel, Kevinmouth, NY 57903
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=CISO


_raw:
11/05/2025 09:34:25.696
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Olivia Collins
	distinguishedName=CN=Olivia Collins,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Olivia
	sn=Collins
	cn=Olivia Collins
Object Details:
	sAMAccountType=805306368
	sAMAccountName=ocollins
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-209391130-3880317083-1643281405-1169
	primaryGroupID=513
	pwdLastSet=09:21.57 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=4feaba76-bc6a-443e-9b12-a87dd72b5dac
	whenChanged=09:34.25 AM, Wed 11/05/2025
	whenCreated=09:21.57 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30016
	uSNCreated=13179
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=24735 Webster Locks, North Jonathanton, MD 97223
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 09:34:25.696
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Domain Admins
	distinguishedName=CN=Domain Admins,CN=Users,DC=allports,DC=local
	cn=Domain Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Domain Admins
	objectSid=S-1-5-21-209391130-3880317083-1643281405-512
	objectGUID=4e444272-fe5f-4351-8dd8-b08fa4225d87
	whenChanged=09:34.25 AM, Wed 11/05/2025
	whenCreated=09:19.14 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30014
	uSNCreated=12345
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141914.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483646
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	member=CN=Axel White,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Logan Clark,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Michael Rivera,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Erick Smith,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=David Carter,OU=Executive,OU=Departments,DC=allports,DC=local|CN=Isabella Clark,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Sarah Hill,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Eleanor Moore,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Penelope Brooks,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Kevin Miller,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Alessia Ross,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=John Taylor,OU=Executive,OU=Departments,DC=allports,DC=local|CN=Bailey Finn,OU=Administration,OU=Departments,DC=allports,DC=local|CN=Kai Hill,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Josie Young,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Ethan Fisher,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Nora Nelson,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Olivia Collins,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=James Porter,OU=Executive,OU=Departments,DC=allports,DC=local|CN=Linda Vega,OU=Executive,OU=Departments,DC=allports,DC=local|CN=Emily Carter,OU=Executive,OU=Departments,DC=allports,DC=local|CN=Administrator,CN=Users,DC=allports,DC=local
	description=Designated administrators of the domain


_raw:
11/05/2025 09:34:25.696
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=James Porter
	distinguishedName=CN=James Porter,OU=Executive,OU=Departments,DC=allports,DC=local
	givenName=James
	sn=Porter
	cn=James Porter
Object Details:
	sAMAccountType=805306368
	sAMAccountName=jporter
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-209391130-3880317083-1643281405-1138
	primaryGroupID=513
	pwdLastSet=09:21.55 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=a8cd496a-a83b-4ff9-b1d7-317c015843e2
	whenChanged=09:34.25 AM, Wed 11/05/2025
	whenCreated=09:21.55 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30013
	uSNCreated=12982
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=25652 Desiree Forge, West Juliefurt, OR 59085
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=CFO


_raw:
11/05/2025 09:34:25.696
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Schema Admins
	distinguishedName=CN=Schema Admins,CN=Users,DC=allports,DC=local
	cn=Schema Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Schema Admins
	objectSid=S-1-5-21-209391130-3880317083-1643281405-518
	objectGUID=ba657660-a1e4-40e1-87f8-3985325429db
	whenChanged=09:34.25 AM, Wed 11/05/2025
	whenCreated=09:19.14 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30011
	uSNCreated=12336
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141914.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483640
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local
	member=CN=Administrator,CN=Users,DC=allports,DC=local
	description=Designated administrators of the schema


_raw:
11/05/2025 09:34:25.696
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=cloudbase-init
	displayName=cloudbase-init
	distinguishedName=CN=cloudbase-init,CN=Users,DC=allports,DC=local
	cn=cloudbase-init
Object Details:
	sAMAccountType=805306368
	sAMAccountName=cloudbase-init
	logonCount=5
	accountExpires=Never Expires
	objectSid=S-1-5-21-209391130-3880317083-1643281405-1000
	primaryGroupID=513
	pwdLastSet=09:09.45 AM, Wed 11/05/2025
	lastLogon=09:19.54 AM, Wed 11/05/2025
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=66048
	objectGUID=60511f56-769f-4f8f-900e-def017a1a3c4
	whenChanged=09:34.25 AM, Wed 11/05/2025
	whenCreated=09:18.14 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30010
	uSNCreated=8198
	instanceType=4
Additional Details:
	lastLogonTimestamp=09:19.54 AM, Wed 11/05/2025
	dSCorePropagationData=20251105141914.0Z|16010101000001.0Z
	adminCount=1
	memberOf=CN=Administrators,CN=Builtin,DC=allports,DC=local


_raw:
11/05/2025 09:34:25.696
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Bailey Finn
	distinguishedName=CN=Bailey Finn,OU=Administration,OU=Departments,DC=allports,DC=local
	givenName=Bailey
	sn=Finn
	cn=Bailey Finn
Object Details:
	sAMAccountType=805306368
	sAMAccountName=bfinn
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-209391130-3880317083-1643281405-2009
	primaryGroupID=513
	pwdLastSet=09:22.48 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=eaa4993c-8905-4173-8c55-f7291fff1974
	whenChanged=09:34.25 AM, Wed 11/05/2025
	whenCreated=09:22.48 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30008
	uSNCreated=18242
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=USNS Jackson, FPO AP 90789
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Director of Technical Services


_raw:
11/05/2025 09:34:25.696
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Enterprise Admins
	distinguishedName=CN=Enterprise Admins,CN=Users,DC=allports,DC=local
	cn=Enterprise Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Enterprise Admins
	objectSid=S-1-5-21-209391130-3880317083-1643281405-519
	objectGUID=39a43c35-25e8-4f8f-840c-c7758f299406
	whenChanged=09:34.25 AM, Wed 11/05/2025
	whenCreated=09:19.14 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30006
	uSNCreated=12339
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141914.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483640
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	member=CN=Administrator,CN=Users,DC=allports,DC=local
	description=Designated administrators of the enterprise


_raw:
11/05/2025 09:34:25.696
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Administrator
	distinguishedName=CN=Administrator,CN=Users,DC=allports,DC=local
	cn=Administrator
Object Details:
	sAMAccountType=805306368
	sAMAccountName=Administrator
	logonCount=1
	accountExpires=0
	objectSid=S-1-5-21-209391130-3880317083-1643281405-500
	primaryGroupID=513
	pwdLastSet=09:11.18 AM, Wed 11/05/2025
	lastLogon=12:47.08 PM, Tue 06/21/2022
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=1b91ac24-d7b8-475a-b18e-2f4c7a3267c4
	whenChanged=09:34.25 AM, Wed 11/05/2025
	whenCreated=09:18.14 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30005
	uSNCreated=8196
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141914.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	adminCount=1
	logonHours=<binary>
	memberOf=CN=Group Policy Creator Owners,CN=Users,DC=allports,DC=local|CN=Domain Admins,CN=Users,DC=allports,DC=local|CN=Enterprise Admins,CN=Users,DC=allports,DC=local|CN=Schema Admins,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	description=Built-in account for administering the computer/domain


_raw:
11/05/2025 09:34:25.681
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Josie Young
	distinguishedName=CN=Josie Young,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Josie
	sn=Young
	cn=Josie Young
Object Details:
	sAMAccountType=805306368
	sAMAccountName=jyoung
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-209391130-3880317083-1643281405-1897
	primaryGroupID=513
	pwdLastSet=09:22.42 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=83348620-fe26-4ec3-a7ee-3b97b5e2c04d
	whenChanged=09:34.25 AM, Wed 11/05/2025
	whenCreated=09:22.42 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30003
	uSNCreated=17564
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=49085 Tucker Circles Suite 272, Novakborough, RI 93174
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 09:34:25.681
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Ethan Fisher
	distinguishedName=CN=Ethan Fisher,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Ethan
	sn=Fisher
	cn=Ethan Fisher
Object Details:
	sAMAccountType=805306368
	sAMAccountName=efisher
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-209391130-3880317083-1643281405-1618
	primaryGroupID=513
	pwdLastSet=09:22.25 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=d4157e1f-292d-478a-91e3-95dedc3bb3fe
	whenChanged=09:34.25 AM, Wed 11/05/2025
	whenCreated=09:22.25 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30001
	uSNCreated=15885
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=79800 Bruce Vista, Hortonberg, HI 64197
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 09:34:25.681
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Penelope Brooks
	distinguishedName=CN=Penelope Brooks,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Penelope
	sn=Brooks
	cn=Penelope Brooks
Object Details:
	sAMAccountType=805306368
	sAMAccountName=pbrooks
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-209391130-3880317083-1643281405-2496
	primaryGroupID=513
	pwdLastSet=09:23.18 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=fd2fb615-5df4-4035-b6a2-31690693b69a
	whenChanged=09:34.25 AM, Wed 11/05/2025
	whenCreated=09:23.18 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=29999
	uSNCreated=21178
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=373 Dickson Pike, Darrenstad, VA 06979
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 09:34:25.681
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Linda Vega
	distinguishedName=CN=Linda Vega,OU=Executive,OU=Departments,DC=allports,DC=local
	givenName=Linda
	sn=Vega
	cn=Linda Vega
Object Details:
	sAMAccountType=805306368
	sAMAccountName=lvega
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-209391130-3880317083-1643281405-1131
	primaryGroupID=513
	pwdLastSet=09:21.55 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=5a7b8513-6e21-4bdd-a7ee-76912565c437
	whenChanged=09:34.25 AM, Wed 11/05/2025
	whenCreated=09:21.55 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=29997
	uSNCreated=12935
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=36745 Smith Drive, Grantberg, NJ 17682
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=CIO


_raw:
11/05/2025 09:34:25.681
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Eleanor Moore
	distinguishedName=CN=Eleanor Moore,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Eleanor
	sn=Moore
	cn=Eleanor Moore
Object Details:
	sAMAccountType=805306368
	sAMAccountName=emoore
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-209391130-3880317083-1643281405-2661
	primaryGroupID=513
	pwdLastSet=09:23.28 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=2348aa0d-9d9a-47e8-89de-9c2b37431842
	whenChanged=09:34.25 AM, Wed 11/05/2025
	whenCreated=09:23.28 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=29995
	uSNCreated=22171
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=212 James Vista, Porterport, NH 76563
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 09:34:25.681
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Alessia Ross
	distinguishedName=CN=Alessia Ross,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Alessia
	sn=Ross
	cn=Alessia Ross
Object Details:
	sAMAccountType=805306368
	sAMAccountName=aross1
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-209391130-3880317083-1643281405-2431
	primaryGroupID=513
	pwdLastSet=09:23.14 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=a8d70809-435b-4817-83f7-8e7918cf50c2
	whenChanged=09:34.25 AM, Wed 11/05/2025
	whenCreated=09:23.14 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=29993
	uSNCreated=20782
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=4994 Kathleen Overpass Apt. 818, Port Larryborough, ND 84763
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 09:34:25.634
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Container,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=AdminSDHolder
	distinguishedName=CN=AdminSDHolder,CN=System,DC=allports,DC=local
	cn=AdminSDHolder
Object Details:
	objectGUID=b186b253-0ef1-43ad-bf61-d3841cebaf7a
	whenChanged=09:34.25 AM, Wed 11/05/2025
	whenCreated=09:18.13 AM, Wed 11/05/2025
	objectClass=top|container
Event Details:
	uSNChanged=29991
	uSNCreated=5704
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141914.0Z|16010101000000.0Z
	isCriticalSystemObject=TRUE
	systemFlags=-1946157056
	showInAdvancedViewOnly=TRUE


_raw:
11/05/2025 09:34:08.299
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Read-only Domain Controllers
	distinguishedName=CN=Read-only Domain Controllers,CN=Users,DC=allports,DC=local
	cn=Read-only Domain Controllers
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Read-only Domain Controllers
	objectSid=S-1-5-21-2156928299-141476290-3729382057-521
	objectGUID=53fb69d2-4a4e-4611-98e6-51a03519d8bf
	whenChanged=09:34.08 AM, Wed 11/05/2025
	whenCreated=09:18.57 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30057
	uSNCreated=12419
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141857.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483646
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local
	description=Members of this group are Read-Only Domain Controllers in the domain


_raw:
11/05/2025 09:34:08.283
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Domain Controllers
	distinguishedName=CN=Domain Controllers,CN=Users,DC=allports,DC=local
	cn=Domain Controllers
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Domain Controllers
	objectSid=S-1-5-21-2156928299-141476290-3729382057-516
	objectGUID=7178bc1b-6012-4a1f-bfe0-26aee4308b83
	whenChanged=09:34.08 AM, Wed 11/05/2025
	whenCreated=09:18.57 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30056
	uSNCreated=12333
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141857.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483646
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local
	description=All domain controllers in the domain


_raw:
11/05/2025 09:34:08.283
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=krbtgt
	distinguishedName=CN=krbtgt,CN=Users,DC=allports,DC=local
	cn=krbtgt
Object Details:
	sAMAccountType=805306368
	sAMAccountName=krbtgt
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2156928299-141476290-3729382057-502
	primaryGroupID=513
	pwdLastSet=09:18.57 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=514
	objectGUID=e7a882e0-184a-4f06-bff6-099b42f78b26
	whenChanged=09:34.08 AM, Wed 11/05/2025
	whenCreated=09:18.57 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30054
	uSNCreated=12324
	instanceType=4
Additional Details:
	msDS-SupportedEncryptionTypes=0
	dSCorePropagationData=20251105141857.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	servicePrincipalName=kadmin/changepw
	adminCount=1
	showInAdvancedViewOnly=TRUE
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local
	description=Key Distribution Center Service Account


_raw:
11/05/2025 09:34:08.268
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Print Operators
	distinguishedName=CN=Print Operators,CN=Builtin,DC=allports,DC=local
	cn=Print Operators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Print Operators
	objectSid=S-1-5-32-550
	objectGUID=542b65f0-4cda-4783-a496-494336cf5bcf
	whenChanged=09:34.08 AM, Wed 11/05/2025
	whenCreated=09:17.56 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30053
	uSNCreated=8215
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141857.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Members can administer printers installed on domain controllers


_raw:
11/05/2025 09:34:08.268
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Backup Operators
	distinguishedName=CN=Backup Operators,CN=Builtin,DC=allports,DC=local
	cn=Backup Operators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Backup Operators
	objectSid=S-1-5-32-551
	objectGUID=d87b56c3-d58f-4c03-a0ae-9bfaa1914585
	whenChanged=09:34.08 AM, Wed 11/05/2025
	whenCreated=09:17.56 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30051
	uSNCreated=8216
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141857.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Backup Operators can override security restrictions for the sole purpose of backing up or restoring files


_raw:
11/05/2025 09:34:08.268
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Server Operators
	distinguishedName=CN=Server Operators,CN=Builtin,DC=allports,DC=local
	cn=Server Operators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Server Operators
	objectSid=S-1-5-32-549
	objectGUID=938cf991-616f-484c-9cdd-a8fd92cb0c83
	whenChanged=09:34.08 AM, Wed 11/05/2025
	whenCreated=09:18.57 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30049
	uSNCreated=12360
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141857.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Members can administer domain servers


_raw:
11/05/2025 09:34:08.268
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Administrators
	distinguishedName=CN=Administrators,CN=Builtin,DC=allports,DC=local
	cn=Administrators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Administrators
	objectSid=S-1-5-32-544
	objectGUID=65c14462-758d-4769-ace2-06a90f5fc9f2
	whenChanged=09:34.08 AM, Wed 11/05/2025
	whenCreated=09:17.56 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30048
	uSNCreated=8201
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141857.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	member=CN=Domain Admins,CN=Users,DC=allports,DC=local|CN=Enterprise Admins,CN=Users,DC=allports,DC=local|CN=Admin,CN=Users,DC=allports,DC=local|CN=cloudbase-init,CN=Users,DC=allports,DC=local|CN=Administrator,CN=Users,DC=allports,DC=local
	description=Administrators have complete and unrestricted access to the computer/domain


_raw:
11/05/2025 09:34:08.268
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Account Operators
	distinguishedName=CN=Account Operators,CN=Builtin,DC=allports,DC=local
	cn=Account Operators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Account Operators
	objectSid=S-1-5-32-548
	objectGUID=fca96f2f-a7a1-4084-aeeb-eb0171c91eb2
	whenChanged=09:34.08 AM, Wed 11/05/2025
	whenCreated=09:18.57 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30046
	uSNCreated=12363
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141857.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Members can administer domain user and group accounts


_raw:
11/05/2025 09:34:08.252
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Replicator
	distinguishedName=CN=Replicator,CN=Builtin,DC=allports,DC=local
	cn=Replicator
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Replicator
	objectSid=S-1-5-32-552
	objectGUID=5d34b526-89a4-4b61-a650-a48f64af102f
	whenChanged=09:34.08 AM, Wed 11/05/2025
	whenCreated=09:17.56 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30045
	uSNCreated=8217
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141857.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Supports file replication in a domain


_raw:
11/05/2025 09:34:08.236
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Administrator
	distinguishedName=CN=Administrator,CN=Users,DC=allports,DC=local
	cn=Administrator
Object Details:
	sAMAccountType=805306368
	sAMAccountName=Administrator
	logonCount=1
	accountExpires=0
	objectSid=S-1-5-21-2156928299-141476290-3729382057-500
	primaryGroupID=513
	pwdLastSet=09:11.01 AM, Wed 11/05/2025
	lastLogon=12:47.08 PM, Tue 06/21/2022
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=7d69baed-c77c-4e94-bd3b-db36e4d97ce7
	whenChanged=09:34.08 AM, Wed 11/05/2025
	whenCreated=09:17.56 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30043
	uSNCreated=8196
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141857.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	adminCount=1
	logonHours=<binary>
	memberOf=CN=Group Policy Creator Owners,CN=Users,DC=allports,DC=local|CN=Domain Admins,CN=Users,DC=allports,DC=local|CN=Enterprise Admins,CN=Users,DC=allports,DC=local|CN=Schema Admins,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	description=Built-in account for administering the computer/domain


_raw:
11/05/2025 09:34:08.236
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Kevin Miller
	distinguishedName=CN=Kevin Miller,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Kevin
	sn=Miller
	cn=Kevin Miller
Object Details:
	sAMAccountType=805306368
	sAMAccountName=kmiller
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2156928299-141476290-3729382057-2444
	primaryGroupID=513
	pwdLastSet=09:22.47 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=3cb8bbe5-1863-41ed-88ab-de1415b20daf
	whenChanged=09:34.08 AM, Wed 11/05/2025
	whenCreated=09:22.47 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30041
	uSNCreated=20862
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=041 Ronnie Branch, Oconnellfort, WV 97644
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 09:34:08.236
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Isabella Clark
	distinguishedName=CN=Isabella Clark,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Isabella
	sn=Clark
	cn=Isabella Clark
Object Details:
	sAMAccountType=805306368
	sAMAccountName=iclark1
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2156928299-141476290-3729382057-3155
	primaryGroupID=513
	pwdLastSet=09:23.29 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=110659df-1c06-45b9-bd37-a6e93abbae88
	whenChanged=09:34.08 AM, Wed 11/05/2025
	whenCreated=09:23.29 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30039
	uSNCreated=25142
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=8686 Rachel Fords, Port Jason, NE 94930
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 09:34:08.236
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=David Carter
	distinguishedName=CN=David Carter,OU=Executive,OU=Departments,DC=allports,DC=local
	givenName=David
	sn=Carter
	cn=David Carter
Object Details:
	sAMAccountType=805306368
	sAMAccountName=dcarter
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2156928299-141476290-3729382057-3329
	primaryGroupID=513
	pwdLastSet=09:23.40 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=cd80e5cc-2a2b-47e3-867b-ace7c7291722
	whenChanged=09:34.08 AM, Wed 11/05/2025
	whenCreated=09:23.40 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30037
	uSNCreated=26189
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=80034 Stark Walks Apt. 756, Mcdanielberg, WY 73366
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Co-Founder & CEO


_raw:
11/05/2025 09:34:08.221
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Domain Admins
	distinguishedName=CN=Domain Admins,CN=Users,DC=allports,DC=local
	cn=Domain Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Domain Admins
	objectSid=S-1-5-21-2156928299-141476290-3729382057-512
	objectGUID=202786be-7975-4156-b017-ba70ab1da2bd
	whenChanged=09:34.08 AM, Wed 11/05/2025
	whenCreated=09:18.57 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30035
	uSNCreated=12345
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141857.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483646
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	member=CN=Axel White,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Logan Clark,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Michael Rivera,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Erick Smith,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=David Carter,OU=Executive,OU=Departments,DC=allports,DC=local|CN=Isabella Clark,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Sarah Hill,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Eleanor Moore,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Penelope Brooks,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Kevin Miller,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Alessia Ross,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=John Taylor,OU=Executive,OU=Departments,DC=allports,DC=local|CN=Bailey Finn,OU=Administration,OU=Departments,DC=allports,DC=local|CN=Kai Hill,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Josie Young,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Ethan Fisher,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Nora Nelson,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Olivia Collins,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=James Porter,OU=Executive,OU=Departments,DC=allports,DC=local|CN=Linda Vega,OU=Executive,OU=Departments,DC=allports,DC=local|CN=Emily Carter,OU=Executive,OU=Departments,DC=allports,DC=local|CN=Administrator,CN=Users,DC=allports,DC=local
	description=Designated administrators of the domain


_raw:
11/05/2025 09:34:08.221
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Ethan Fisher
	distinguishedName=CN=Ethan Fisher,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Ethan
	sn=Fisher
	cn=Ethan Fisher
Object Details:
	sAMAccountType=805306368
	sAMAccountName=efisher
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2156928299-141476290-3729382057-1618
	primaryGroupID=513
	pwdLastSet=09:21.57 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=bff580ba-8dfe-49bf-b7f9-39c6a3df3b56
	whenChanged=09:34.08 AM, Wed 11/05/2025
	whenCreated=09:21.57 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30034
	uSNCreated=15884
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=79800 Bruce Vista, Hortonberg, HI 64197
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 09:34:08.221
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Penelope Brooks
	distinguishedName=CN=Penelope Brooks,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Penelope
	sn=Brooks
	cn=Penelope Brooks
Object Details:
	sAMAccountType=805306368
	sAMAccountName=pbrooks
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2156928299-141476290-3729382057-2496
	primaryGroupID=513
	pwdLastSet=09:22.50 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=cc0a97b9-4882-4a3b-8ae3-4e6b302f335f
	whenChanged=09:34.08 AM, Wed 11/05/2025
	whenCreated=09:22.50 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30032
	uSNCreated=21177
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=373 Dickson Pike, Darrenstad, VA 06979
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 09:34:08.205
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Logan Clark
	distinguishedName=CN=Logan Clark,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Logan
	sn=Clark
	cn=Logan Clark
Object Details:
	sAMAccountType=805306368
	sAMAccountName=lclark1
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2156928299-141476290-3729382057-3751
	primaryGroupID=513
	pwdLastSet=09:24.05 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=47a8f1a9-caad-4436-a358-96685134fdb4
	whenChanged=09:34.08 AM, Wed 11/05/2025
	whenCreated=09:24.05 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30030
	uSNCreated=28732
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=29325 Rebecca Estate, Lake Ronald, CO 85102
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 09:34:08.205
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Enterprise Key Admins
	distinguishedName=CN=Enterprise Key Admins,CN=Users,DC=allports,DC=local
	cn=Enterprise Key Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Enterprise Key Admins
	objectSid=S-1-5-21-2156928299-141476290-3729382057-527
	objectGUID=6616f0a9-595d-46dd-8fd2-eb082ca552f4
	whenChanged=09:34.08 AM, Wed 11/05/2025
	whenCreated=09:18.57 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30028
	uSNCreated=12453
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141857.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483640
	adminCount=1
	description=Members of this group can perform administrative actions on key objects within the forest.


_raw:
11/05/2025 09:34:08.205
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Key Admins
	distinguishedName=CN=Key Admins,CN=Users,DC=allports,DC=local
	cn=Key Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Key Admins
	objectSid=S-1-5-21-2156928299-141476290-3729382057-526
	objectGUID=8af3e2a8-6d9e-449d-9769-2c9113ecd4b9
	whenChanged=09:34.08 AM, Wed 11/05/2025
	whenCreated=09:18.57 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30027
	uSNCreated=12450
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141857.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483646
	adminCount=1
	description=Members of this group can perform administrative actions on key objects within the domain.


_raw:
11/05/2025 09:34:08.205
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Enterprise Admins
	distinguishedName=CN=Enterprise Admins,CN=Users,DC=allports,DC=local
	cn=Enterprise Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Enterprise Admins
	objectSid=S-1-5-21-2156928299-141476290-3729382057-519
	objectGUID=3123d5a7-0c71-4212-855d-a02145e71748
	whenChanged=09:34.08 AM, Wed 11/05/2025
	whenCreated=09:18.57 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30026
	uSNCreated=12339
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141857.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483640
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	member=CN=Administrator,CN=Users,DC=allports,DC=local
	description=Designated administrators of the enterprise


_raw:
11/05/2025 09:34:08.190
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Linda Vega
	distinguishedName=CN=Linda Vega,OU=Executive,OU=Departments,DC=allports,DC=local
	givenName=Linda
	sn=Vega
	cn=Linda Vega
Object Details:
	sAMAccountType=805306368
	sAMAccountName=lvega
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2156928299-141476290-3729382057-1131
	primaryGroupID=513
	pwdLastSet=09:21.27 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=7dcd4e9e-7aaa-431e-93ee-2fa818b18e2e
	whenChanged=09:34.08 AM, Wed 11/05/2025
	whenCreated=09:21.27 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30025
	uSNCreated=12934
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=36745 Smith Drive, Grantberg, NJ 17682
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=CIO


_raw:
11/05/2025 09:34:08.190
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Michael Rivera
	distinguishedName=CN=Michael Rivera,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Michael
	sn=Rivera
	cn=Michael Rivera
Object Details:
	sAMAccountType=805306368
	sAMAccountName=mrivera1
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2156928299-141476290-3729382057-3719
	primaryGroupID=513
	pwdLastSet=09:24.03 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=dd3cb89a-96a4-49f2-8913-091c8e85124f
	whenChanged=09:34.08 AM, Wed 11/05/2025
	whenCreated=09:24.03 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30023
	uSNCreated=28537
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=11949 Gray Meadows Apt. 897, Lindseyberg, NV 06447
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 09:34:08.190
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Erick Smith
	distinguishedName=CN=Erick Smith,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Erick
	sn=Smith
	cn=Erick Smith
Object Details:
	sAMAccountType=805306368
	sAMAccountName=esmith
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2156928299-141476290-3729382057-3646
	primaryGroupID=513
	pwdLastSet=09:23.59 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=7803f494-8aee-42e2-8a04-1fb881644726
	whenChanged=09:34.08 AM, Wed 11/05/2025
	whenCreated=09:23.59 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30021
	uSNCreated=28096
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=569 Carrie Route Apt. 586, Lake James, NV 94321
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 09:34:08.190
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Kai Hill
	distinguishedName=CN=Kai Hill,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Kai
	sn=Hill
	cn=Kai Hill
Object Details:
	sAMAccountType=805306368
	sAMAccountName=khill
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2156928299-141476290-3729382057-1985
	primaryGroupID=513
	pwdLastSet=09:22.20 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=e3d6e98e-7f7d-4187-90c4-17028f6fb6c5
	whenChanged=09:34.08 AM, Wed 11/05/2025
	whenCreated=09:22.20 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30019
	uSNCreated=18094
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=20294 Fletcher Turnpike, Fostertown, DE 39758
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 09:34:08.190
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Axel White
	distinguishedName=CN=Axel White,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Axel
	sn=White
	cn=Axel White
Object Details:
	sAMAccountType=805306368
	sAMAccountName=awhite1
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2156928299-141476290-3729382057-3866
	primaryGroupID=513
	pwdLastSet=09:24.12 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=ba34fd86-2c2e-402d-ba47-73f43745f020
	whenChanged=09:34.08 AM, Wed 11/05/2025
	whenCreated=09:24.12 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30017
	uSNCreated=29436
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=2130 David Mount, West Meganland, AZ 73217
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 09:34:08.190
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=cloudbase-init
	displayName=cloudbase-init
	distinguishedName=CN=cloudbase-init,CN=Users,DC=allports,DC=local
	cn=cloudbase-init
Object Details:
	sAMAccountType=805306368
	sAMAccountName=cloudbase-init
	logonCount=5
	accountExpires=Never Expires
	objectSid=S-1-5-21-2156928299-141476290-3729382057-1000
	primaryGroupID=513
	pwdLastSet=09:09.27 AM, Wed 11/05/2025
	lastLogon=09:19.37 AM, Wed 11/05/2025
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=66048
	objectGUID=6f536484-f8ee-4cef-8f71-42fc1c6a731c
	whenChanged=09:34.08 AM, Wed 11/05/2025
	whenCreated=09:17.56 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30015
	uSNCreated=8198
	instanceType=4
Additional Details:
	lastLogonTimestamp=09:19.37 AM, Wed 11/05/2025
	dSCorePropagationData=20251105141857.0Z|16010101000001.0Z
	adminCount=1
	memberOf=CN=Administrators,CN=Builtin,DC=allports,DC=local


_raw:
11/05/2025 09:34:08.190
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Schema Admins
	distinguishedName=CN=Schema Admins,CN=Users,DC=allports,DC=local
	cn=Schema Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Schema Admins
	objectSid=S-1-5-21-2156928299-141476290-3729382057-518
	objectGUID=03fca072-d068-4245-b2a6-788e54e409c3
	whenChanged=09:34.08 AM, Wed 11/05/2025
	whenCreated=09:18.57 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30013
	uSNCreated=12336
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141857.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483640
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local
	member=CN=Administrator,CN=Users,DC=allports,DC=local
	description=Designated administrators of the schema


_raw:
11/05/2025 09:34:08.190
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Alessia Ross
	distinguishedName=CN=Alessia Ross,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Alessia
	sn=Ross
	cn=Alessia Ross
Object Details:
	sAMAccountType=805306368
	sAMAccountName=aross1
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2156928299-141476290-3729382057-2431
	primaryGroupID=513
	pwdLastSet=09:22.46 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=835fd05c-63a5-49ba-98ff-d66fd36ecd18
	whenChanged=09:34.08 AM, Wed 11/05/2025
	whenCreated=09:22.46 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30012
	uSNCreated=20781
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=4994 Kathleen Overpass Apt. 818, Port Larryborough, ND 84763
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 09:34:08.190
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Emily Carter
	distinguishedName=CN=Emily Carter,OU=Executive,OU=Departments,DC=allports,DC=local
	givenName=Emily
	sn=Carter
	cn=Emily Carter
Object Details:
	sAMAccountType=805306368
	sAMAccountName=ecarter
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2156928299-141476290-3729382057-1106
	primaryGroupID=513
	pwdLastSet=09:21.25 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=97a28f56-cdea-434b-a9f6-c19dad28772d
	whenChanged=09:34.08 AM, Wed 11/05/2025
	whenCreated=09:21.25 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30010
	uSNCreated=12773
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=5325 Rogers Village, Lydiaport, KY 37558
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Co-Founder & COO


_raw:
11/05/2025 09:34:08.190
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Admin
	displayName=Admin
	distinguishedName=CN=Admin,CN=Users,DC=allports,DC=local
	cn=Admin
Object Details:
	sAMAccountType=805306368
	sAMAccountName=Admin
	logonCount=1
	accountExpires=Never Expires
	objectSid=S-1-5-21-2156928299-141476290-3729382057-1001
	primaryGroupID=513
	pwdLastSet=09:07.59 AM, Wed 11/05/2025
	lastLogon=09:07.19 AM, Wed 11/05/2025
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=66048
	objectGUID=7394b232-4fd9-4463-99fb-dc19e5889173
	whenChanged=09:34.08 AM, Wed 11/05/2025
	whenCreated=09:17.56 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30008
	uSNCreated=8199
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141857.0Z|16010101000001.0Z
	adminCount=1
	memberOf=CN=Administrators,CN=Builtin,DC=allports,DC=local


_raw:
11/05/2025 09:34:08.190
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Bailey Finn
	distinguishedName=CN=Bailey Finn,OU=Administration,OU=Departments,DC=allports,DC=local
	givenName=Bailey
	sn=Finn
	cn=Bailey Finn
Object Details:
	sAMAccountType=805306368
	sAMAccountName=bfinn
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2156928299-141476290-3729382057-2009
	primaryGroupID=513
	pwdLastSet=09:22.21 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=a9818226-2042-4ad4-95ab-97fc6a670842
	whenChanged=09:34.08 AM, Wed 11/05/2025
	whenCreated=09:22.21 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30006
	uSNCreated=18241
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=USNS Jackson, FPO AP 90789
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Director of Technical Services


_raw:
11/05/2025 09:34:08.190
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=John Taylor
	distinguishedName=CN=John Taylor,OU=Executive,OU=Departments,DC=allports,DC=local
	givenName=John
	sn=Taylor
	cn=John Taylor
Object Details:
	sAMAccountType=805306368
	sAMAccountName=jtaylor
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2156928299-141476290-3729382057-2402
	primaryGroupID=513
	pwdLastSet=09:22.44 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=f7b59c12-958b-49ad-9114-2d71d37215fa
	whenChanged=09:34.08 AM, Wed 11/05/2025
	whenCreated=09:22.44 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30004
	uSNCreated=20604
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=80159 Rebekah Tunnel, Kevinmouth, NY 57903
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=CISO


_raw:
11/05/2025 09:34:08.190
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Josie Young
	distinguishedName=CN=Josie Young,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Josie
	sn=Young
	cn=Josie Young
Object Details:
	sAMAccountType=805306368
	sAMAccountName=jyoung
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2156928299-141476290-3729382057-1897
	primaryGroupID=513
	pwdLastSet=09:22.14 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=c7cea40f-2265-4501-960a-52cb941c2208
	whenChanged=09:34.08 AM, Wed 11/05/2025
	whenCreated=09:22.14 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30002
	uSNCreated=17563
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=49085 Tucker Circles Suite 272, Novakborough, RI 93174
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 09:34:08.190
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=James Porter
	distinguishedName=CN=James Porter,OU=Executive,OU=Departments,DC=allports,DC=local
	givenName=James
	sn=Porter
	cn=James Porter
Object Details:
	sAMAccountType=805306368
	sAMAccountName=jporter
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2156928299-141476290-3729382057-1138
	primaryGroupID=513
	pwdLastSet=09:21.28 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=1354c30e-f045-48a0-862b-f7153a93ea1d
	whenChanged=09:34.08 AM, Wed 11/05/2025
	whenCreated=09:21.28 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30000
	uSNCreated=12981
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=25652 Desiree Forge, West Juliefurt, OR 59085
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=CFO


_raw:
11/05/2025 09:34:08.190
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Nora Nelson
	distinguishedName=CN=Nora Nelson,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Nora
	sn=Nelson
	cn=Nora Nelson
Object Details:
	sAMAccountType=805306368
	sAMAccountName=nnelson
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2156928299-141476290-3729382057-1510
	primaryGroupID=513
	pwdLastSet=09:21.51 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=13c3aa0b-2d8e-4684-835e-4579b1075a2d
	whenChanged=09:34.08 AM, Wed 11/05/2025
	whenCreated=09:21.51 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=29998
	uSNCreated=15233
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=886 Alexander Ridges Suite 360, West William, OK 83863
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 09:34:08.190
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Sarah Hill
	distinguishedName=CN=Sarah Hill,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Sarah
	sn=Hill
	cn=Sarah Hill
Object Details:
	sAMAccountType=805306368
	sAMAccountName=shill
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2156928299-141476290-3729382057-3089
	primaryGroupID=513
	pwdLastSet=09:23.25 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=82407107-fa62-4e00-99d2-6c027e80311d
	whenChanged=09:34.08 AM, Wed 11/05/2025
	whenCreated=09:23.25 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=29996
	uSNCreated=24743
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=837 Wolfe Street, Mitchellhaven, VT 83781
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 09:34:08.174
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Eleanor Moore
	distinguishedName=CN=Eleanor Moore,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Eleanor
	sn=Moore
	cn=Eleanor Moore
Object Details:
	sAMAccountType=805306368
	sAMAccountName=emoore
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2156928299-141476290-3729382057-2661
	primaryGroupID=513
	pwdLastSet=09:23.00 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=d47e4307-4274-4473-8c4b-c7baabdd3597
	whenChanged=09:34.08 AM, Wed 11/05/2025
	whenCreated=09:23.00 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=29994
	uSNCreated=22170
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=212 James Vista, Porterport, NH 76563
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 09:34:08.174
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Olivia Collins
	distinguishedName=CN=Olivia Collins,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Olivia
	sn=Collins
	cn=Olivia Collins
Object Details:
	sAMAccountType=805306368
	sAMAccountName=ocollins
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2156928299-141476290-3729382057-1169
	primaryGroupID=513
	pwdLastSet=09:21.30 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=653a5b06-ac5a-4cd3-8955-5f5e33dd55ff
	whenChanged=09:34.08 AM, Wed 11/05/2025
	whenCreated=09:21.30 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=29992
	uSNCreated=13178
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=24735 Webster Locks, North Jonathanton, MD 97223
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 09:34:08.127
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Container,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=AdminSDHolder
	distinguishedName=CN=AdminSDHolder,CN=System,DC=allports,DC=local
	cn=AdminSDHolder
Object Details:
	objectGUID=fc379726-2ec9-40e1-8b2e-55dd0ad6c469
	whenChanged=09:34.08 AM, Wed 11/05/2025
	whenCreated=09:17.56 AM, Wed 11/05/2025
	objectClass=top|container
Event Details:
	uSNChanged=29990
	uSNCreated=5704
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141857.0Z|16010101000000.0Z
	isCriticalSystemObject=TRUE
	systemFlags=-1946157056
	showInAdvancedViewOnly=TRUE


_raw:
11/05/2025 09:33:33.187
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Read-only Domain Controllers
	distinguishedName=CN=Read-only Domain Controllers,CN=Users,DC=allports,DC=local
	cn=Read-only Domain Controllers
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Read-only Domain Controllers
	objectSid=S-1-5-21-2384545126-3094289152-2355773625-521
	objectGUID=60f672bc-2c6b-47d6-bf25-42172fd1b646
	whenChanged=09:33.33 AM, Wed 11/05/2025
	whenCreated=09:18.21 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30057
	uSNCreated=12419
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141821.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483646
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local
	description=Members of this group are Read-Only Domain Controllers in the domain


_raw:
11/05/2025 09:33:33.171
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Domain Controllers
	distinguishedName=CN=Domain Controllers,CN=Users,DC=allports,DC=local
	cn=Domain Controllers
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Domain Controllers
	objectSid=S-1-5-21-2384545126-3094289152-2355773625-516
	objectGUID=1650cb82-3069-4151-8443-e12fd6a84c36
	whenChanged=09:33.33 AM, Wed 11/05/2025
	whenCreated=09:18.21 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30056
	uSNCreated=12333
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141821.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483646
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local
	description=All domain controllers in the domain


_raw:
11/05/2025 09:33:33.140
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=krbtgt
	distinguishedName=CN=krbtgt,CN=Users,DC=allports,DC=local
	cn=krbtgt
Object Details:
	sAMAccountType=805306368
	sAMAccountName=krbtgt
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-2384545126-3094289152-2355773625-502
	primaryGroupID=513
	pwdLastSet=09:18.21 AM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=514
	objectGUID=37f2e117-d80f-4fc8-801b-80210451bcf4
	whenChanged=09:33.33 AM, Wed 11/05/2025
	whenCreated=09:18.21 AM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30054
	uSNCreated=12324
	instanceType=4
Additional Details:
	msDS-SupportedEncryptionTypes=0
	dSCorePropagationData=20251105141821.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	servicePrincipalName=kadmin/changepw
	adminCount=1
	showInAdvancedViewOnly=TRUE
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local
	description=Key Distribution Center Service Account


_raw:
11/05/2025 09:33:33.124
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Account Operators
	distinguishedName=CN=Account Operators,CN=Builtin,DC=allports,DC=local
	cn=Account Operators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Account Operators
	objectSid=S-1-5-32-548
	objectGUID=ce37e4a0-2fb6-4452-a173-f026fc4568bf
	whenChanged=09:33.33 AM, Wed 11/05/2025
	whenCreated=09:18.21 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30053
	uSNCreated=12363
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141821.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Members can administer domain user and group accounts


_raw:
11/05/2025 09:33:33.124
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Backup Operators
	distinguishedName=CN=Backup Operators,CN=Builtin,DC=allports,DC=local
	cn=Backup Operators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Backup Operators
	objectSid=S-1-5-32-551
	objectGUID=459b8c9a-29fe-4f9d-8782-7fb05e4dd5f0
	whenChanged=09:33.33 AM, Wed 11/05/2025
	whenCreated=09:17.19 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30052
	uSNCreated=8216
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141821.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Backup Operators can override security restrictions for the sole purpose of backing up or restoring files


_raw:
11/05/2025 09:33:33.108
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Administrators
	distinguishedName=CN=Administrators,CN=Builtin,DC=allports,DC=local
	cn=Administrators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Administrators
	objectSid=S-1-5-32-544
	objectGUID=3b5cc66f-722e-4f5f-bfac-66024a144484
	whenChanged=09:33.33 AM, Wed 11/05/2025
	whenCreated=09:17.19 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30050
	uSNCreated=8201
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141821.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	member=CN=Domain Admins,CN=Users,DC=allports,DC=local|CN=Enterprise Admins,CN=Users,DC=allports,DC=local|CN=Admin,CN=Users,DC=allports,DC=local|CN=cloudbase-init,CN=Users,DC=allports,DC=local|CN=Administrator,CN=Users,DC=allports,DC=local
	description=Administrators have complete and unrestricted access to the computer/domain


_raw:
11/05/2025 09:33:33.093
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Server Operators
	distinguishedName=CN=Server Operators,CN=Builtin,DC=allports,DC=local
	cn=Server Operators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Server Operators
	objectSid=S-1-5-32-549
	objectGUID=2ad03e4b-b651-4b0d-8baa-85f88455f999
	whenChanged=09:33.33 AM, Wed 11/05/2025
	whenCreated=09:18.21 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30048
	uSNCreated=12360
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141821.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Members can administer domain servers


_raw:
11/05/2025 09:33:33.077
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Print Operators
	distinguishedName=CN=Print Operators,CN=Builtin,DC=allports,DC=local
	cn=Print Operators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Print Operators
	objectSid=S-1-5-32-550
	objectGUID=8f2d2f10-f470-48a0-aaae-782409d50395
	whenChanged=09:33.33 AM, Wed 11/05/2025
	whenCreated=09:17.19 AM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30047
	uSNCreated=8215
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105141821.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Members can administer printers installed on domain controllers