_raw:
11/05/2025 12:20:27.244
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Read-only Domain Controllers
	distinguishedName=CN=Read-only Domain Controllers,CN=Users,DC=allports,DC=local
	cn=Read-only Domain Controllers
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Read-only Domain Controllers
	objectSid=S-1-5-21-3232171031-1642574971-623616582-521
	objectGUID=1ea184ae-c208-47b4-93c5-1ff16b763e85
	whenChanged=12:20.27 PM, Wed 11/05/2025
	whenCreated=12:05.16 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30058
	uSNCreated=12419
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170516.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483646
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local
	description=Members of this group are Read-Only Domain Controllers in the domain


_raw:
11/05/2025 12:20:27.228
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Domain Controllers
	distinguishedName=CN=Domain Controllers,CN=Users,DC=allports,DC=local
	cn=Domain Controllers
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Domain Controllers
	objectSid=S-1-5-21-3232171031-1642574971-623616582-516
	objectGUID=9f19e556-65e5-4211-8d68-0d154491aca1
	whenChanged=12:20.27 PM, Wed 11/05/2025
	whenCreated=12:05.16 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30057
	uSNCreated=12333
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170516.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483646
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local
	description=All domain controllers in the domain

_sourcetype: ActiveDirectory

source: ActiveDirectory

sourcetype: ActiveDirectory


_raw:
11/05/2025 12:20:27.197
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=krbtgt
	distinguishedName=CN=krbtgt,CN=Users,DC=allports,DC=local
	cn=krbtgt
Object Details:
	sAMAccountType=805306368
	sAMAccountName=krbtgt
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3232171031-1642574971-623616582-502
	primaryGroupID=513
	pwdLastSet=12:05.16 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=514
	objectGUID=e673bd30-1162-4a46-ab6d-6df90ec7308d
	whenChanged=12:20.27 PM, Wed 11/05/2025
	whenCreated=12:05.16 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30055
	uSNCreated=12324
	instanceType=4
Additional Details:
	msDS-SupportedEncryptionTypes=0
	dSCorePropagationData=20251105170516.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	servicePrincipalName=kadmin/changepw
	adminCount=1
	showInAdvancedViewOnly=TRUE
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local
	description=Key Distribution Center Service Account


_raw:
11/05/2025 12:20:27.166
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Administrators
	distinguishedName=CN=Administrators,CN=Builtin,DC=allports,DC=local
	cn=Administrators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Administrators
	objectSid=S-1-5-32-544
	objectGUID=b5f15fed-a85a-4301-9c72-e2528c37a878
	whenChanged=12:20.27 PM, Wed 11/05/2025
	whenCreated=12:04.15 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30054
	uSNCreated=8201
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170516.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	member=CN=Domain Admins,CN=Users,DC=allports,DC=local|CN=Enterprise Admins,CN=Users,DC=allports,DC=local|CN=Admin,CN=Users,DC=allports,DC=local|CN=cloudbase-init,CN=Users,DC=allports,DC=local|CN=Administrator,CN=Users,DC=allports,DC=local
	description=Administrators have complete and unrestricted access to the computer/domain


_raw:
11/05/2025 12:20:27.119
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Server Operators
	distinguishedName=CN=Server Operators,CN=Builtin,DC=allports,DC=local
	cn=Server Operators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Server Operators
	objectSid=S-1-5-32-549
	objectGUID=c0a5b1e3-6cf9-40f8-9613-9f6cf7869341
	whenChanged=12:20.27 PM, Wed 11/05/2025
	whenCreated=12:05.16 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30052
	uSNCreated=12360
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170516.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Members can administer domain servers


_raw:
11/05/2025 12:20:27.087
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Account Operators
	distinguishedName=CN=Account Operators,CN=Builtin,DC=allports,DC=local
	cn=Account Operators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Account Operators
	objectSid=S-1-5-32-548
	objectGUID=408d33d5-560e-4b89-b23f-9534658aeeea
	whenChanged=12:20.27 PM, Wed 11/05/2025
	whenCreated=12:05.16 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30051
	uSNCreated=12363
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170516.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Members can administer domain user and group accounts


_raw:
11/05/2025 12:20:27.041
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Replicator
	distinguishedName=CN=Replicator,CN=Builtin,DC=allports,DC=local
	cn=Replicator
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Replicator
	objectSid=S-1-5-32-552
	objectGUID=c91cde99-7e00-46b2-9bc6-e3a580fba227
	whenChanged=12:20.26 PM, Wed 11/05/2025
	whenCreated=12:04.15 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30050
	uSNCreated=8217
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170516.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Supports file replication in a domain


_raw:
11/05/2025 12:20:26.978
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Print Operators
	distinguishedName=CN=Print Operators,CN=Builtin,DC=allports,DC=local
	cn=Print Operators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Print Operators
	objectSid=S-1-5-32-550
	objectGUID=d1185f0f-dddc-444a-bd06-b17efc1a0af0
	whenChanged=12:20.26 PM, Wed 11/05/2025
	whenCreated=12:04.15 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30048
	uSNCreated=8215
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170516.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Members can administer printers installed on domain controllers


_raw:
11/05/2025 12:20:26.931
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Backup Operators
	distinguishedName=CN=Backup Operators,CN=Builtin,DC=allports,DC=local
	cn=Backup Operators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Backup Operators
	objectSid=S-1-5-32-551
	objectGUID=6aaf0b05-43d8-4983-86bd-9104e5c88a8e
	whenChanged=12:20.26 PM, Wed 11/05/2025
	whenCreated=12:04.15 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30046
	uSNCreated=8216
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170516.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Backup Operators can override security restrictions for the sole purpose of backing up or restoring files


_raw:
11/05/2025 12:20:26.900
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=John Taylor
	distinguishedName=CN=John Taylor,OU=Executive,OU=Departments,DC=allports,DC=local
	givenName=John
	sn=Taylor
	cn=John Taylor
Object Details:
	sAMAccountType=805306368
	sAMAccountName=jtaylor
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3232171031-1642574971-623616582-2045
	primaryGroupID=513
	pwdLastSet=12:08.44 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=2f31dcfe-c184-416c-90eb-98aade0dcd5f
	whenChanged=12:20.26 PM, Wed 11/05/2025
	whenCreated=12:08.44 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30044
	uSNCreated=18452
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=80159 Rebekah Tunnel, Kevinmouth, NY 57903
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=CISO


_raw:
11/05/2025 12:20:26.853
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Admin
	displayName=Admin
	distinguishedName=CN=Admin,CN=Users,DC=allports,DC=local
	cn=Admin
Object Details:
	sAMAccountType=805306368
	sAMAccountName=Admin
	logonCount=1
	accountExpires=Never Expires
	objectSid=S-1-5-21-3232171031-1642574971-623616582-1001
	primaryGroupID=513
	pwdLastSet=11:53.44 AM, Wed 11/05/2025
	lastLogon=11:53.00 AM, Wed 11/05/2025
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=66048
	objectGUID=246dc2fa-8b44-4017-b551-8b22aede7bba
	whenChanged=12:20.26 PM, Wed 11/05/2025
	whenCreated=12:04.15 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30042
	uSNCreated=8199
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170516.0Z|16010101000001.0Z
	adminCount=1
	memberOf=CN=Administrators,CN=Builtin,DC=allports,DC=local


_raw:
11/05/2025 12:20:26.837
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=James Porter
	distinguishedName=CN=James Porter,OU=Executive,OU=Departments,DC=allports,DC=local
	givenName=James
	sn=Porter
	cn=James Porter
Object Details:
	sAMAccountType=805306368
	sAMAccountName=jporter
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3232171031-1642574971-623616582-3332
	primaryGroupID=513
	pwdLastSet=12:10.06 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=c714a0f2-2a68-411c-979c-85da2bfb7e0a
	whenChanged=12:20.26 PM, Wed 11/05/2025
	whenCreated=12:10.06 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30040
	uSNCreated=26211
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=25652 Desiree Forge, West Juliefurt, OR 59085
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=CFO


_raw:
11/05/2025 12:20:26.806
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Nora Nelson
	distinguishedName=CN=Nora Nelson,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Nora
	sn=Nelson
	cn=Nora Nelson
Object Details:
	sAMAccountType=805306368
	sAMAccountName=nnelson
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3232171031-1642574971-623616582-1850
	primaryGroupID=513
	pwdLastSet=12:08.31 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=7dcf8af2-1bf4-4033-8c0e-a463bcfd18ed
	whenChanged=12:20.26 PM, Wed 11/05/2025
	whenCreated=12:08.31 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30038
	uSNCreated=17269
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=886 Alexander Ridges Suite 360, West William, OK 83863
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 12:20:26.791
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Schema Admins
	distinguishedName=CN=Schema Admins,CN=Users,DC=allports,DC=local
	cn=Schema Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Schema Admins
	objectSid=S-1-5-21-3232171031-1642574971-623616582-518
	objectGUID=53dac3ef-cfb3-4501-b39b-f075071cf28e
	whenChanged=12:20.26 PM, Wed 11/05/2025
	whenCreated=12:05.16 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30036
	uSNCreated=12336
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170516.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483640
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local
	member=CN=Administrator,CN=Users,DC=allports,DC=local
	description=Designated administrators of the schema


_raw:
11/05/2025 12:20:26.744
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Bailey Finn
	distinguishedName=CN=Bailey Finn,OU=Administration,OU=Departments,DC=allports,DC=local
	givenName=Bailey
	sn=Finn
	cn=Bailey Finn
Object Details:
	sAMAccountType=805306368
	sAMAccountName=bfinn
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3232171031-1642574971-623616582-3116
	primaryGroupID=513
	pwdLastSet=12:09.53 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=b86369dc-4d52-4044-94a5-755f25f0d862
	whenChanged=12:20.26 PM, Wed 11/05/2025
	whenCreated=12:09.53 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30035
	uSNCreated=24906
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=USNS Jackson, FPO AP 90789
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Director of Technical Services


_raw:
11/05/2025 12:20:26.696
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Emily Carter
	distinguishedName=CN=Emily Carter,OU=Executive,OU=Departments,DC=allports,DC=local
	givenName=Emily
	sn=Carter
	cn=Emily Carter
Object Details:
	sAMAccountType=805306368
	sAMAccountName=ecarter
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3232171031-1642574971-623616582-2604
	primaryGroupID=513
	pwdLastSet=12:09.21 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=726c42d2-78bc-45e7-ab8e-77eff5edb264
	whenChanged=12:20.26 PM, Wed 11/05/2025
	whenCreated=12:09.21 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30033
	uSNCreated=21817
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=5325 Rogers Village, Lydiaport, KY 37558
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Co-Founder & COO


_raw:
11/05/2025 12:20:26.696
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Penelope Brooks
	distinguishedName=CN=Penelope Brooks,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Penelope
	sn=Brooks
	cn=Penelope Brooks
Object Details:
	sAMAccountType=805306368
	sAMAccountName=pbrooks
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3232171031-1642574971-623616582-2375
	primaryGroupID=513
	pwdLastSet=12:09.06 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=7b8eafd1-cb52-44e7-9403-b71a61f2e4e3
	whenChanged=12:20.26 PM, Wed 11/05/2025
	whenCreated=12:09.06 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30031
	uSNCreated=20440
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=373 Dickson Pike, Darrenstad, VA 06979
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 12:20:26.696
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Administrator
	distinguishedName=CN=Administrator,CN=Users,DC=allports,DC=local
	cn=Administrator
Object Details:
	sAMAccountType=805306368
	sAMAccountName=Administrator
	logonCount=1
	accountExpires=0
	objectSid=S-1-5-21-3232171031-1642574971-623616582-500
	primaryGroupID=513
	pwdLastSet=11:57.08 AM, Wed 11/05/2025
	lastLogon=12:47.08 PM, Tue 06/21/2022
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=fad4c3c2-0006-4b6c-87a4-ee3a979ced45
	whenChanged=12:20.26 PM, Wed 11/05/2025
	whenCreated=12:04.15 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30029
	uSNCreated=8196
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170516.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	adminCount=1
	logonHours=<binary>
	memberOf=CN=Group Policy Creator Owners,CN=Users,DC=allports,DC=local|CN=Domain Admins,CN=Users,DC=allports,DC=local|CN=Enterprise Admins,CN=Users,DC=allports,DC=local|CN=Schema Admins,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	description=Built-in account for administering the computer/domain


_raw:
11/05/2025 12:20:26.696
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Kai Hill
	distinguishedName=CN=Kai Hill,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Kai
	sn=Hill
	cn=Kai Hill
Object Details:
	sAMAccountType=805306368
	sAMAccountName=khill
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3232171031-1642574971-623616582-2142
	primaryGroupID=513
	pwdLastSet=12:08.51 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=c2e569bd-c1d1-42f7-bfe8-71efcb44f3ad
	whenChanged=12:20.26 PM, Wed 11/05/2025
	whenCreated=12:08.51 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30027
	uSNCreated=19037
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=20294 Fletcher Turnpike, Fostertown, DE 39758
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 12:20:26.696
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=cloudbase-init
	displayName=cloudbase-init
	distinguishedName=CN=cloudbase-init,CN=Users,DC=allports,DC=local
	cn=cloudbase-init
Object Details:
	sAMAccountType=805306368
	sAMAccountName=cloudbase-init
	logonCount=5
	accountExpires=Never Expires
	objectSid=S-1-5-21-3232171031-1642574971-623616582-1000
	primaryGroupID=513
	pwdLastSet=11:55.25 AM, Wed 11/05/2025
	lastLogon=12:05.56 PM, Wed 11/05/2025
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=66048
	objectGUID=f46a5ab0-36c5-44d0-b24a-1d9740baef18
	whenChanged=12:20.26 PM, Wed 11/05/2025
	whenCreated=12:04.15 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30025
	uSNCreated=8198
	instanceType=4
Additional Details:
	lastLogonTimestamp=12:05.56 PM, Wed 11/05/2025
	dSCorePropagationData=20251105170516.0Z|16010101000001.0Z
	adminCount=1
	memberOf=CN=Administrators,CN=Builtin,DC=allports,DC=local


_raw:
11/05/2025 12:20:26.696
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Enterprise Admins
	distinguishedName=CN=Enterprise Admins,CN=Users,DC=allports,DC=local
	cn=Enterprise Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Enterprise Admins
	objectSid=S-1-5-21-3232171031-1642574971-623616582-519
	objectGUID=90e1a6ab-63cd-404d-b261-e4adf415287b
	whenChanged=12:20.26 PM, Wed 11/05/2025
	whenCreated=12:05.16 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30023
	uSNCreated=12339
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170516.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483640
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	member=CN=Administrator,CN=Users,DC=allports,DC=local
	description=Designated administrators of the enterprise


_raw:
11/05/2025 12:20:26.696
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Alessia Ross
	distinguishedName=CN=Alessia Ross,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Alessia
	sn=Ross
	cn=Alessia Ross
Object Details:
	sAMAccountType=805306368
	sAMAccountName=aross1
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3232171031-1642574971-623616582-1969
	primaryGroupID=513
	pwdLastSet=12:08.39 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=33dc0c97-3c86-4984-a144-9d5a726eb2a4
	whenChanged=12:20.26 PM, Wed 11/05/2025
	whenCreated=12:08.39 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30022
	uSNCreated=17988
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=4994 Kathleen Overpass Apt. 818, Port Larryborough, ND 84763
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 12:20:26.696
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Michael Rivera
	distinguishedName=CN=Michael Rivera,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Michael
	sn=Rivera
	cn=Michael Rivera
Object Details:
	sAMAccountType=805306368
	sAMAccountName=mrivera1
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3232171031-1642574971-623616582-2647
	primaryGroupID=513
	pwdLastSet=12:09.23 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=16af298c-a04f-4b11-8000-fc1163d6a0bc
	whenChanged=12:20.26 PM, Wed 11/05/2025
	whenCreated=12:09.23 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30020
	uSNCreated=22078
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=11949 Gray Meadows Apt. 897, Lindseyberg, NV 06447
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 12:20:26.696
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Eleanor Moore
	distinguishedName=CN=Eleanor Moore,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Eleanor
	sn=Moore
	cn=Eleanor Moore
Object Details:
	sAMAccountType=805306368
	sAMAccountName=emoore
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3232171031-1642574971-623616582-3816
	primaryGroupID=513
	pwdLastSet=12:10.36 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=c4d54085-21d3-4265-95d9-147737fb229a
	whenChanged=12:20.26 PM, Wed 11/05/2025
	whenCreated=12:10.36 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30018
	uSNCreated=29132
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=212 James Vista, Porterport, NH 76563
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 12:20:26.696
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Josie Young
	distinguishedName=CN=Josie Young,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Josie
	sn=Young
	cn=Josie Young
Object Details:
	sAMAccountType=805306368
	sAMAccountName=jyoung
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3232171031-1642574971-623616582-3280
	primaryGroupID=513
	pwdLastSet=12:10.03 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=76d96f7f-9898-46fd-a77c-0e7dca9f2882
	whenChanged=12:20.26 PM, Wed 11/05/2025
	whenCreated=12:10.03 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30016
	uSNCreated=25896
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=49085 Tucker Circles Suite 272, Novakborough, RI 93174
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 12:20:26.696
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Erick Smith
	distinguishedName=CN=Erick Smith,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Erick
	sn=Smith
	cn=Erick Smith
Object Details:
	sAMAccountType=805306368
	sAMAccountName=esmith
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3232171031-1642574971-623616582-1182
	primaryGroupID=513
	pwdLastSet=12:07.49 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=7a7f427b-3dfb-4945-9a67-1d86299288d6
	whenChanged=12:20.26 PM, Wed 11/05/2025
	whenCreated=12:07.49 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30014
	uSNCreated=13246
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=569 Carrie Route Apt. 586, Lake James, NV 94321
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 12:20:26.696
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Kevin Miller
	distinguishedName=CN=Kevin Miller,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Kevin
	sn=Miller
	cn=Kevin Miller
Object Details:
	sAMAccountType=805306368
	sAMAccountName=kmiller
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3232171031-1642574971-623616582-3073
	primaryGroupID=513
	pwdLastSet=12:09.50 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=5d6bfb74-d791-40ca-a6ae-1fd21810998d
	whenChanged=12:20.26 PM, Wed 11/05/2025
	whenCreated=12:09.50 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30012
	uSNCreated=24645
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=041 Ronnie Branch, Oconnellfort, WV 97644
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 12:20:26.681
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Axel White
	distinguishedName=CN=Axel White,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Axel
	sn=White
	cn=Axel White
Object Details:
	sAMAccountType=805306368
	sAMAccountName=awhite1
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3232171031-1642574971-623616582-1985
	primaryGroupID=513
	pwdLastSet=12:08.40 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=d175f557-a638-448f-9e6e-e0a3d7bd2078
	whenChanged=12:20.26 PM, Wed 11/05/2025
	whenCreated=12:08.40 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30010
	uSNCreated=18087
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=2130 David Mount, West Meganland, AZ 73217
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 12:20:26.681
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Ethan Fisher
	distinguishedName=CN=Ethan Fisher,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Ethan
	sn=Fisher
	cn=Ethan Fisher
Object Details:
	sAMAccountType=805306368
	sAMAccountName=efisher
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3232171031-1642574971-623616582-2662
	primaryGroupID=513
	pwdLastSet=12:09.24 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=90c71e54-4245-4eb9-8659-a8a39ccd123c
	whenChanged=12:20.26 PM, Wed 11/05/2025
	whenCreated=12:09.24 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30008
	uSNCreated=22171
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=79800 Bruce Vista, Hortonberg, HI 64197
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 12:20:26.681
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Olivia Collins
	distinguishedName=CN=Olivia Collins,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Olivia
	sn=Collins
	cn=Olivia Collins
Object Details:
	sAMAccountType=805306368
	sAMAccountName=ocollins
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3232171031-1642574971-623616582-1430
	primaryGroupID=513
	pwdLastSet=12:08.05 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=2734c44e-9cc7-497c-8fd5-5b1c1f56569f
	whenChanged=12:20.26 PM, Wed 11/05/2025
	whenCreated=12:08.05 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30006
	uSNCreated=14743
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=24735 Webster Locks, North Jonathanton, MD 97223
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 12:20:26.681
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=David Carter
	distinguishedName=CN=David Carter,OU=Executive,OU=Departments,DC=allports,DC=local
	givenName=David
	sn=Carter
	cn=David Carter
Object Details:
	sAMAccountType=805306368
	sAMAccountName=dcarter
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3232171031-1642574971-623616582-3181
	primaryGroupID=513
	pwdLastSet=12:09.57 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=69cee13a-302e-4cd9-9b13-f205ed7c9605
	whenChanged=12:20.26 PM, Wed 11/05/2025
	whenCreated=12:09.57 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30004
	uSNCreated=25299
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=80034 Stark Walks Apt. 756, Mcdanielberg, WY 73366
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Co-Founder & CEO


_raw:
11/05/2025 12:20:26.681
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Enterprise Key Admins
	distinguishedName=CN=Enterprise Key Admins,CN=Users,DC=allports,DC=local
	cn=Enterprise Key Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Enterprise Key Admins
	objectSid=S-1-5-21-3232171031-1642574971-623616582-527
	objectGUID=26f19e38-c1e4-4a71-b918-70ad4cce2bff
	whenChanged=12:20.26 PM, Wed 11/05/2025
	whenCreated=12:05.16 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30002
	uSNCreated=12453
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170516.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483640
	adminCount=1
	description=Members of this group can perform administrative actions on key objects within the forest.


_raw:
11/05/2025 12:20:26.681
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Sarah Hill
	distinguishedName=CN=Sarah Hill,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Sarah
	sn=Hill
	cn=Sarah Hill
Object Details:
	sAMAccountType=805306368
	sAMAccountName=shill
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3232171031-1642574971-623616582-1829
	primaryGroupID=513
	pwdLastSet=12:08.30 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=ee95be37-6a0f-4cf5-ac5a-72f506072dc4
	whenChanged=12:20.26 PM, Wed 11/05/2025
	whenCreated=12:08.30 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30001
	uSNCreated=17140
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=837 Wolfe Street, Mitchellhaven, VT 83781
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 12:20:26.681
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Isabella Clark
	distinguishedName=CN=Isabella Clark,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Isabella
	sn=Clark
	cn=Isabella Clark
Object Details:
	sAMAccountType=805306368
	sAMAccountName=iclark1
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3232171031-1642574971-623616582-3351
	primaryGroupID=513
	pwdLastSet=12:10.07 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=4b993532-2219-467f-97c1-cbe618f829a5
	whenChanged=12:20.26 PM, Wed 11/05/2025
	whenCreated=12:10.07 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=29999
	uSNCreated=26328
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=8686 Rachel Fords, Port Jason, NE 94930
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 12:20:26.681
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Domain Admins
	distinguishedName=CN=Domain Admins,CN=Users,DC=allports,DC=local
	cn=Domain Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Domain Admins
	objectSid=S-1-5-21-3232171031-1642574971-623616582-512
	objectGUID=22342b2f-a511-47fe-83bd-52ecf4ce7064
	whenChanged=12:20.26 PM, Wed 11/05/2025
	whenCreated=12:05.16 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=29997
	uSNCreated=12345
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170516.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483646
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	member=CN=Logan Clark,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Eleanor Moore,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Isabella Clark,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=James Porter,OU=Executive,OU=Departments,DC=allports,DC=local|CN=Josie Young,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=David Carter,OU=Executive,OU=Departments,DC=allports,DC=local|CN=Bailey Finn,OU=Administration,OU=Departments,DC=allports,DC=local|CN=Kevin Miller,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Linda Vega,OU=Executive,OU=Departments,DC=allports,DC=local|CN=Ethan Fisher,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Michael Rivera,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Emily Carter,OU=Executive,OU=Departments,DC=allports,DC=local|CN=Penelope Brooks,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Kai Hill,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=John Taylor,OU=Executive,OU=Departments,DC=allports,DC=local|CN=Axel White,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Alessia Ross,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Nora Nelson,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Sarah Hill,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Olivia Collins,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Erick Smith,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Administrator,CN=Users,DC=allports,DC=local
	description=Designated administrators of the domain


_raw:
11/05/2025 12:20:26.681
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Key Admins
	distinguishedName=CN=Key Admins,CN=Users,DC=allports,DC=local
	cn=Key Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Key Admins
	objectSid=S-1-5-21-3232171031-1642574971-623616582-526
	objectGUID=c17bdf0c-84a0-451c-987e-d1d9aaa8ddb0
	whenChanged=12:20.26 PM, Wed 11/05/2025
	whenCreated=12:05.16 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=29996
	uSNCreated=12450
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170516.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483646
	adminCount=1
	description=Members of this group can perform administrative actions on key objects within the domain.


_raw:
11/05/2025 12:20:26.681
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Logan Clark
	distinguishedName=CN=Logan Clark,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Logan
	sn=Clark
	cn=Logan Clark
Object Details:
	sAMAccountType=805306368
	sAMAccountName=lclark1
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3232171031-1642574971-623616582-3910
	primaryGroupID=513
	pwdLastSet=12:10.42 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=17d16307-6fc6-4cdc-bc06-46911f7a6b58
	whenChanged=12:20.26 PM, Wed 11/05/2025
	whenCreated=12:10.42 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=29995
	uSNCreated=29701
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=29325 Rebecca Estate, Lake Ronald, CO 85102
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 12:20:26.666
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Linda Vega
	distinguishedName=CN=Linda Vega,OU=Executive,OU=Departments,DC=allports,DC=local
	givenName=Linda
	sn=Vega
	cn=Linda Vega
Object Details:
	sAMAccountType=805306368
	sAMAccountName=lvega
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-3232171031-1642574971-623616582-2760
	primaryGroupID=513
	pwdLastSet=12:09.31 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=e4aa1605-89e9-41de-bffe-47cfd572c6dd
	whenChanged=12:20.26 PM, Wed 11/05/2025
	whenCreated=12:09.31 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=29993
	uSNCreated=22762
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=20251105172026.0Z|16010101000000.0Z
	adminCount=1
	streetAddress=36745 Smith Drive, Grantberg, NJ 17682
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=CIO


_raw:
11/05/2025 12:20:26.587
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Container,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=AdminSDHolder
	distinguishedName=CN=AdminSDHolder,CN=System,DC=allports,DC=local
	cn=AdminSDHolder
Object Details:
	objectGUID=56ec391d-3b16-4f3a-a1dc-c8a54f34c5c0
	whenChanged=12:20.26 PM, Wed 11/05/2025
	whenCreated=12:04.15 PM, Wed 11/05/2025
	objectClass=top|container
Event Details:
	uSNChanged=29991
	uSNCreated=5704
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170516.0Z|16010101000000.0Z
	isCriticalSystemObject=TRUE
	systemFlags=-1946157056
	showInAdvancedViewOnly=TRUE


_raw:
11/05/2025 12:20:14.203
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Domain Controllers
	distinguishedName=CN=Domain Controllers,CN=Users,DC=allports,DC=local
	cn=Domain Controllers
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Domain Controllers
	objectSid=S-1-5-21-1467035127-280533777-406903113-516
	objectGUID=df0309fa-17e7-4bf0-8b13-f51254a87b5b
	whenChanged=12:20.14 PM, Wed 11/05/2025
	whenCreated=12:05.03 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30059
	uSNCreated=12333
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170503.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483646
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local
	description=All domain controllers in the domain


_raw:
11/05/2025 12:20:14.203
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Read-only Domain Controllers
	distinguishedName=CN=Read-only Domain Controllers,CN=Users,DC=allports,DC=local
	cn=Read-only Domain Controllers
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Read-only Domain Controllers
	objectSid=S-1-5-21-1467035127-280533777-406903113-521
	objectGUID=537ba665-32f0-45ac-bf2b-5f1cc8f48f40
	whenChanged=12:20.14 PM, Wed 11/05/2025
	whenCreated=12:05.03 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30058
	uSNCreated=12419
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170503.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483646
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local
	description=Members of this group are Read-Only Domain Controllers in the domain


_raw:
11/05/2025 12:20:14.203
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=krbtgt
	distinguishedName=CN=krbtgt,CN=Users,DC=allports,DC=local
	cn=krbtgt
Object Details:
	sAMAccountType=805306368
	sAMAccountName=krbtgt
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-1467035127-280533777-406903113-502
	primaryGroupID=513
	pwdLastSet=12:05.03 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=514
	objectGUID=cb219a58-8f33-4691-97cb-dd825132e443
	whenChanged=12:20.14 PM, Wed 11/05/2025
	whenCreated=12:05.03 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30057
	uSNCreated=12324
	instanceType=4
Additional Details:
	msDS-SupportedEncryptionTypes=0
	dSCorePropagationData=20251105170503.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	servicePrincipalName=kadmin/changepw
	adminCount=1
	showInAdvancedViewOnly=TRUE
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local
	description=Key Distribution Center Service Account


_raw:
11/05/2025 12:20:14.188
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Backup Operators
	distinguishedName=CN=Backup Operators,CN=Builtin,DC=allports,DC=local
	cn=Backup Operators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Backup Operators
	objectSid=S-1-5-32-551
	objectGUID=d7eba0eb-056b-46fd-abc7-3dce59f146bd
	whenChanged=12:20.14 PM, Wed 11/05/2025
	whenCreated=12:03.48 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30055
	uSNCreated=8216
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170503.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Backup Operators can override security restrictions for the sole purpose of backing up or restoring files


_raw:
11/05/2025 12:20:14.188
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Replicator
	distinguishedName=CN=Replicator,CN=Builtin,DC=allports,DC=local
	cn=Replicator
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Replicator
	objectSid=S-1-5-32-552
	objectGUID=ef8199db-67b3-406f-8c08-2b84055a6ca0
	whenChanged=12:20.14 PM, Wed 11/05/2025
	whenCreated=12:03.48 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30053
	uSNCreated=8217
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170503.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Supports file replication in a domain


_raw:
11/05/2025 12:20:14.188
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Server Operators
	distinguishedName=CN=Server Operators,CN=Builtin,DC=allports,DC=local
	cn=Server Operators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Server Operators
	objectSid=S-1-5-32-549
	objectGUID=ec5a58c5-7773-4d69-ad50-116399d7e0ad
	whenChanged=12:20.14 PM, Wed 11/05/2025
	whenCreated=12:05.03 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30051
	uSNCreated=12360
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170503.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Members can administer domain servers


_raw:
11/05/2025 12:20:14.172
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Print Operators
	distinguishedName=CN=Print Operators,CN=Builtin,DC=allports,DC=local
	cn=Print Operators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Print Operators
	objectSid=S-1-5-32-550
	objectGUID=9e289ead-d4dc-4336-ab64-b99cded78aed
	whenChanged=12:20.14 PM, Wed 11/05/2025
	whenCreated=12:03.48 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30050
	uSNCreated=8215
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170503.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Members can administer printers installed on domain controllers


_raw:
11/05/2025 12:20:14.172
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Administrators
	distinguishedName=CN=Administrators,CN=Builtin,DC=allports,DC=local
	cn=Administrators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Administrators
	objectSid=S-1-5-32-544
	objectGUID=8e7a6d9c-2079-4f9e-995e-623f18bfc666
	whenChanged=12:20.14 PM, Wed 11/05/2025
	whenCreated=12:03.48 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30048
	uSNCreated=8201
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170503.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	member=CN=Domain Admins,CN=Users,DC=allports,DC=local|CN=Enterprise Admins,CN=Users,DC=allports,DC=local|CN=Admin,CN=Users,DC=allports,DC=local|CN=cloudbase-init,CN=Users,DC=allports,DC=local|CN=Administrator,CN=Users,DC=allports,DC=local
	description=Administrators have complete and unrestricted access to the computer/domain


_raw:
11/05/2025 12:20:14.172
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Account Operators
	distinguishedName=CN=Account Operators,CN=Builtin,DC=allports,DC=local
	cn=Account Operators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Account Operators
	objectSid=S-1-5-32-548
	objectGUID=a3554928-0b69-4cb4-b7e6-ebedf56d5758
	whenChanged=12:20.14 PM, Wed 11/05/2025
	whenCreated=12:05.03 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30046
	uSNCreated=12363
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170503.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Members can administer domain user and group accounts


_raw:
11/05/2025 12:20:14.172
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Admin
	displayName=Admin
	distinguishedName=CN=Admin,CN=Users,DC=allports,DC=local
	cn=Admin
Object Details:
	sAMAccountType=805306368
	sAMAccountName=Admin
	logonCount=1
	accountExpires=Never Expires
	objectSid=S-1-5-21-1467035127-280533777-406903113-1001
	primaryGroupID=513
	pwdLastSet=11:52.49 AM, Wed 11/05/2025
	lastLogon=11:52.09 AM, Wed 11/05/2025
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=66048
	objectGUID=836616fe-7aaf-4be1-a6a4-87fb37ec334a
	whenChanged=12:20.14 PM, Wed 11/05/2025
	whenCreated=12:03.48 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30045
	uSNCreated=8199
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170503.0Z|16010101000001.0Z
	adminCount=1
	memberOf=CN=Administrators,CN=Builtin,DC=allports,DC=local


_raw:
11/05/2025 12:20:14.156
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Logan Clark
	distinguishedName=CN=Logan Clark,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Logan
	sn=Clark
	cn=Logan Clark
Object Details:
	sAMAccountType=805306368
	sAMAccountName=lclark1
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-1467035127-280533777-406903113-3910
	primaryGroupID=513
	pwdLastSet=12:10.28 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=697300f5-976a-4878-a6dd-5d596758b0a7
	whenChanged=12:20.14 PM, Wed 11/05/2025
	whenCreated=12:10.28 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30043
	uSNCreated=29702
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=29325 Rebecca Estate, Lake Ronald, CO 85102
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 12:20:14.156
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Emily Carter
	distinguishedName=CN=Emily Carter,OU=Executive,OU=Departments,DC=allports,DC=local
	givenName=Emily
	sn=Carter
	cn=Emily Carter
Object Details:
	sAMAccountType=805306368
	sAMAccountName=ecarter
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-1467035127-280533777-406903113-2604
	primaryGroupID=513
	pwdLastSet=12:09.06 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=c643d8f0-bdcd-41cd-8498-1ae1af482230
	whenChanged=12:20.14 PM, Wed 11/05/2025
	whenCreated=12:09.06 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30041
	uSNCreated=21818
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=5325 Rogers Village, Lydiaport, KY 37558
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Co-Founder & COO


_raw:
11/05/2025 12:20:14.156
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Sarah Hill
	distinguishedName=CN=Sarah Hill,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Sarah
	sn=Hill
	cn=Sarah Hill
Object Details:
	sAMAccountType=805306368
	sAMAccountName=shill
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-1467035127-280533777-406903113-1829
	primaryGroupID=513
	pwdLastSet=12:08.18 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=a4d00de3-8d2f-4fc8-b239-ffcaef001ba2
	whenChanged=12:20.14 PM, Wed 11/05/2025
	whenCreated=12:08.18 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30039
	uSNCreated=17141
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=837 Wolfe Street, Mitchellhaven, VT 83781
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 12:20:14.156
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Key Admins
	distinguishedName=CN=Key Admins,CN=Users,DC=allports,DC=local
	cn=Key Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Key Admins
	objectSid=S-1-5-21-1467035127-280533777-406903113-526
	objectGUID=dc84f2de-e3a5-4300-8567-c63b910e25db
	whenChanged=12:20.14 PM, Wed 11/05/2025
	whenCreated=12:05.03 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30037
	uSNCreated=12450
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170503.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483646
	adminCount=1
	description=Members of this group can perform administrative actions on key objects within the domain.


_raw:
11/05/2025 12:20:14.156
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Enterprise Admins
	distinguishedName=CN=Enterprise Admins,CN=Users,DC=allports,DC=local
	cn=Enterprise Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Enterprise Admins
	objectSid=S-1-5-21-1467035127-280533777-406903113-519
	objectGUID=c141c8c8-8535-40c5-b985-1dc0a9b90c78
	whenChanged=12:20.14 PM, Wed 11/05/2025
	whenCreated=12:05.03 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30036
	uSNCreated=12339
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170503.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483640
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	member=CN=Administrator,CN=Users,DC=allports,DC=local
	description=Designated administrators of the enterprise


_raw:
11/05/2025 12:20:14.141
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Ethan Fisher
	distinguishedName=CN=Ethan Fisher,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Ethan
	sn=Fisher
	cn=Ethan Fisher
Object Details:
	sAMAccountType=805306368
	sAMAccountName=efisher
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-1467035127-280533777-406903113-2662
	primaryGroupID=513
	pwdLastSet=12:09.10 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=981ef8bb-0277-4e18-9837-69d76184bd6a
	whenChanged=12:20.14 PM, Wed 11/05/2025
	whenCreated=12:09.10 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30035
	uSNCreated=22172
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=79800 Bruce Vista, Hortonberg, HI 64197
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 12:20:14.141
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Michael Rivera
	distinguishedName=CN=Michael Rivera,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Michael
	sn=Rivera
	cn=Michael Rivera
Object Details:
	sAMAccountType=805306368
	sAMAccountName=mrivera1
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-1467035127-280533777-406903113-2647
	primaryGroupID=513
	pwdLastSet=12:09.09 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=adf1e3b2-250c-4eab-a773-f18da3de5960
	whenChanged=12:20.14 PM, Wed 11/05/2025
	whenCreated=12:09.09 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30033
	uSNCreated=22079
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=11949 Gray Meadows Apt. 897, Lindseyberg, NV 06447
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 12:20:14.141
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Josie Young
	distinguishedName=CN=Josie Young,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Josie
	sn=Young
	cn=Josie Young
Object Details:
	sAMAccountType=805306368
	sAMAccountName=jyoung
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-1467035127-280533777-406903113-3280
	primaryGroupID=513
	pwdLastSet=12:09.48 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=6d7334b1-d504-400d-9876-d7f1309db7ba
	whenChanged=12:20.14 PM, Wed 11/05/2025
	whenCreated=12:09.48 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30031
	uSNCreated=25897
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=49085 Tucker Circles Suite 272, Novakborough, RI 93174
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 12:20:14.125
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=David Carter
	distinguishedName=CN=David Carter,OU=Executive,OU=Departments,DC=allports,DC=local
	givenName=David
	sn=Carter
	cn=David Carter
Object Details:
	sAMAccountType=805306368
	sAMAccountName=dcarter
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-1467035127-280533777-406903113-3181
	primaryGroupID=513
	pwdLastSet=12:09.42 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=1caeb6ac-b80c-46e4-8701-9defa69d0a71
	whenChanged=12:20.14 PM, Wed 11/05/2025
	whenCreated=12:09.42 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30029
	uSNCreated=25300
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=80034 Stark Walks Apt. 756, Mcdanielberg, WY 73366
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Co-Founder & CEO


_raw:
11/05/2025 12:20:14.125
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Domain Admins
	distinguishedName=CN=Domain Admins,CN=Users,DC=allports,DC=local
	cn=Domain Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Domain Admins
	objectSid=S-1-5-21-1467035127-280533777-406903113-512
	objectGUID=e8a514ab-57c4-433c-9d1f-dfb3db927966
	whenChanged=12:20.14 PM, Wed 11/05/2025
	whenCreated=12:05.03 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30027
	uSNCreated=12345
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170503.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483646
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	member=CN=Logan Clark,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Eleanor Moore,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Isabella Clark,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=James Porter,OU=Executive,OU=Departments,DC=allports,DC=local|CN=Josie Young,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=David Carter,OU=Executive,OU=Departments,DC=allports,DC=local|CN=Bailey Finn,OU=Administration,OU=Departments,DC=allports,DC=local|CN=Kevin Miller,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Linda Vega,OU=Executive,OU=Departments,DC=allports,DC=local|CN=Ethan Fisher,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Michael Rivera,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Emily Carter,OU=Executive,OU=Departments,DC=allports,DC=local|CN=Penelope Brooks,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Kai Hill,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=John Taylor,OU=Executive,OU=Departments,DC=allports,DC=local|CN=Axel White,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Alessia Ross,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Nora Nelson,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Sarah Hill,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Olivia Collins,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Erick Smith,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Administrator,CN=Users,DC=allports,DC=local
	description=Designated administrators of the domain


_raw:
11/05/2025 12:20:14.125
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Axel White
	distinguishedName=CN=Axel White,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Axel
	sn=White
	cn=Axel White
Object Details:
	sAMAccountType=805306368
	sAMAccountName=awhite1
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-1467035127-280533777-406903113-1985
	primaryGroupID=513
	pwdLastSet=12:08.28 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=a831b6a6-7150-434c-b606-28e9a248c799
	whenChanged=12:20.14 PM, Wed 11/05/2025
	whenCreated=12:08.28 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30026
	uSNCreated=18088
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=2130 David Mount, West Meganland, AZ 73217
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 12:20:14.125
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Kevin Miller
	distinguishedName=CN=Kevin Miller,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Kevin
	sn=Miller
	cn=Kevin Miller
Object Details:
	sAMAccountType=805306368
	sAMAccountName=kmiller
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-1467035127-280533777-406903113-3073
	primaryGroupID=513
	pwdLastSet=12:09.35 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=65973d90-2460-4c20-bd01-ac86ce770b48
	whenChanged=12:20.14 PM, Wed 11/05/2025
	whenCreated=12:09.35 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30024
	uSNCreated=24646
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=041 Ronnie Branch, Oconnellfort, WV 97644
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 12:20:14.125
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Olivia Collins
	distinguishedName=CN=Olivia Collins,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Olivia
	sn=Collins
	cn=Olivia Collins
Object Details:
	sAMAccountType=805306368
	sAMAccountName=ocollins
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-1467035127-280533777-406903113-1430
	primaryGroupID=513
	pwdLastSet=12:07.52 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=6ba6d785-56b9-45a1-a85c-8c7603600ad0
	whenChanged=12:20.14 PM, Wed 11/05/2025
	whenCreated=12:07.52 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30022
	uSNCreated=14744
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=24735 Webster Locks, North Jonathanton, MD 97223
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 12:20:14.125
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Enterprise Key Admins
	distinguishedName=CN=Enterprise Key Admins,CN=Users,DC=allports,DC=local
	cn=Enterprise Key Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Enterprise Key Admins
	objectSid=S-1-5-21-1467035127-280533777-406903113-527
	objectGUID=b855f480-ef0c-4944-aedb-a1706109bbdf
	whenChanged=12:20.14 PM, Wed 11/05/2025
	whenCreated=12:05.03 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30020
	uSNCreated=12453
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170503.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483640
	adminCount=1
	description=Members of this group can perform administrative actions on key objects within the forest.


_raw:
11/05/2025 12:20:14.125
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Isabella Clark
	distinguishedName=CN=Isabella Clark,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Isabella
	sn=Clark
	cn=Isabella Clark
Object Details:
	sAMAccountType=805306368
	sAMAccountName=iclark1
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-1467035127-280533777-406903113-3351
	primaryGroupID=513
	pwdLastSet=12:09.53 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=a8183363-4910-44f3-95eb-c458c5b06674
	whenChanged=12:20.14 PM, Wed 11/05/2025
	whenCreated=12:09.53 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30019
	uSNCreated=26329
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=8686 Rachel Fords, Port Jason, NE 94930
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 12:20:14.125
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Penelope Brooks
	distinguishedName=CN=Penelope Brooks,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Penelope
	sn=Brooks
	cn=Penelope Brooks
Object Details:
	sAMAccountType=805306368
	sAMAccountName=pbrooks
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-1467035127-280533777-406903113-2375
	primaryGroupID=513
	pwdLastSet=12:08.52 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=5d09f462-61a3-49fa-bcb3-3dcb5ab60d72
	whenChanged=12:20.14 PM, Wed 11/05/2025
	whenCreated=12:08.52 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30017
	uSNCreated=20441
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=373 Dickson Pike, Darrenstad, VA 06979
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 12:20:14.125
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=cloudbase-init
	displayName=cloudbase-init
	distinguishedName=CN=cloudbase-init,CN=Users,DC=allports,DC=local
	cn=cloudbase-init
Object Details:
	sAMAccountType=805306368
	sAMAccountName=cloudbase-init
	logonCount=5
	accountExpires=Never Expires
	objectSid=S-1-5-21-1467035127-280533777-406903113-1000
	primaryGroupID=513
	pwdLastSet=11:54.20 AM, Wed 11/05/2025
	lastLogon=12:05.43 PM, Wed 11/05/2025
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=66048
	objectGUID=fb3ca04f-30fe-4fdf-a51c-dce2164836f4
	whenChanged=12:20.14 PM, Wed 11/05/2025
	whenCreated=12:03.48 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30015
	uSNCreated=8198
	instanceType=4
Additional Details:
	lastLogonTimestamp=12:05.43 PM, Wed 11/05/2025
	dSCorePropagationData=20251105170503.0Z|16010101000001.0Z
	adminCount=1
	memberOf=CN=Administrators,CN=Builtin,DC=allports,DC=local


_raw:
11/05/2025 12:20:14.125
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Kai Hill
	distinguishedName=CN=Kai Hill,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Kai
	sn=Hill
	cn=Kai Hill
Object Details:
	sAMAccountType=805306368
	sAMAccountName=khill
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-1467035127-280533777-406903113-2142
	primaryGroupID=513
	pwdLastSet=12:08.38 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=c8cf0549-91b7-495f-b17f-1148e8bea3ed
	whenChanged=12:20.14 PM, Wed 11/05/2025
	whenCreated=12:08.38 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30013
	uSNCreated=19038
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=20294 Fletcher Turnpike, Fostertown, DE 39758
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 12:20:14.125
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Bailey Finn
	distinguishedName=CN=Bailey Finn,OU=Administration,OU=Departments,DC=allports,DC=local
	givenName=Bailey
	sn=Finn
	cn=Bailey Finn
Object Details:
	sAMAccountType=805306368
	sAMAccountName=bfinn
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-1467035127-280533777-406903113-3116
	primaryGroupID=513
	pwdLastSet=12:09.38 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=e8ffd345-b76c-4e12-b943-98eeddcbfec7
	whenChanged=12:20.14 PM, Wed 11/05/2025
	whenCreated=12:09.38 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30011
	uSNCreated=24907
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=USNS Jackson, FPO AP 90789
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Director of Technical Services


_raw:
11/05/2025 12:20:14.125
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Erick Smith
	distinguishedName=CN=Erick Smith,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Erick
	sn=Smith
	cn=Erick Smith
Object Details:
	sAMAccountType=805306368
	sAMAccountName=esmith
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-1467035127-280533777-406903113-1182
	primaryGroupID=513
	pwdLastSet=12:07.37 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=04f93c42-d714-480f-813e-445a59dbd0c8
	whenChanged=12:20.14 PM, Wed 11/05/2025
	whenCreated=12:07.37 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30009
	uSNCreated=13247
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=569 Carrie Route Apt. 586, Lake James, NV 94321
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 12:20:14.125
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Administrator
	distinguishedName=CN=Administrator,CN=Users,DC=allports,DC=local
	cn=Administrator
Object Details:
	sAMAccountType=805306368
	sAMAccountName=Administrator
	logonCount=1
	accountExpires=0
	objectSid=S-1-5-21-1467035127-280533777-406903113-500
	primaryGroupID=513
	pwdLastSet=11:56.22 AM, Wed 11/05/2025
	lastLogon=12:47.08 PM, Tue 06/21/2022
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=6661243e-9037-4725-8916-84d8478b4c32
	whenChanged=12:20.14 PM, Wed 11/05/2025
	whenCreated=12:03.48 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30007
	uSNCreated=8196
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170503.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	adminCount=1
	logonHours=<binary>
	memberOf=CN=Group Policy Creator Owners,CN=Users,DC=allports,DC=local|CN=Domain Admins,CN=Users,DC=allports,DC=local|CN=Enterprise Admins,CN=Users,DC=allports,DC=local|CN=Schema Admins,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	description=Built-in account for administering the computer/domain


_raw:
11/05/2025 12:20:14.110
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Eleanor Moore
	distinguishedName=CN=Eleanor Moore,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Eleanor
	sn=Moore
	cn=Eleanor Moore
Object Details:
	sAMAccountType=805306368
	sAMAccountName=emoore
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-1467035127-280533777-406903113-3816
	primaryGroupID=513
	pwdLastSet=12:10.22 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=07f50628-29de-4242-ad39-ae2461689139
	whenChanged=12:20.14 PM, Wed 11/05/2025
	whenCreated=12:10.22 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30005
	uSNCreated=29133
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=212 James Vista, Porterport, NH 76563
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 12:20:14.110
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Linda Vega
	distinguishedName=CN=Linda Vega,OU=Executive,OU=Departments,DC=allports,DC=local
	givenName=Linda
	sn=Vega
	cn=Linda Vega
Object Details:
	sAMAccountType=805306368
	sAMAccountName=lvega
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-1467035127-280533777-406903113-2760
	primaryGroupID=513
	pwdLastSet=12:09.16 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=a0593f22-c924-4e20-87fc-013981606fe4
	whenChanged=12:20.14 PM, Wed 11/05/2025
	whenCreated=12:09.16 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30003
	uSNCreated=22763
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=36745 Smith Drive, Grantberg, NJ 17682
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=CIO


_raw:
11/05/2025 12:20:14.110
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Schema Admins
	distinguishedName=CN=Schema Admins,CN=Users,DC=allports,DC=local
	cn=Schema Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Schema Admins
	objectSid=S-1-5-21-1467035127-280533777-406903113-518
	objectGUID=d315ca1c-d94f-4ea0-a441-7f0d6a3f3027
	whenChanged=12:20.14 PM, Wed 11/05/2025
	whenCreated=12:05.03 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30001
	uSNCreated=12336
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170503.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483640
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local
	member=CN=Administrator,CN=Users,DC=allports,DC=local
	description=Designated administrators of the schema


_raw:
11/05/2025 12:20:14.110
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=James Porter
	distinguishedName=CN=James Porter,OU=Executive,OU=Departments,DC=allports,DC=local
	givenName=James
	sn=Porter
	cn=James Porter
Object Details:
	sAMAccountType=805306368
	sAMAccountName=jporter
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-1467035127-280533777-406903113-3332
	primaryGroupID=513
	pwdLastSet=12:09.52 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=d007d11a-0c78-4fdd-82d3-15772d057c38
	whenChanged=12:20.14 PM, Wed 11/05/2025
	whenCreated=12:09.52 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30000
	uSNCreated=26212
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=25652 Desiree Forge, West Juliefurt, OR 59085
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=CFO


_raw:
11/05/2025 12:20:14.110
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Nora Nelson
	distinguishedName=CN=Nora Nelson,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Nora
	sn=Nelson
	cn=Nora Nelson
Object Details:
	sAMAccountType=805306368
	sAMAccountName=nnelson
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-1467035127-280533777-406903113-1850
	primaryGroupID=513
	pwdLastSet=12:08.19 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=2272b41a-2310-4324-831d-030a51685fcb
	whenChanged=12:20.14 PM, Wed 11/05/2025
	whenCreated=12:08.19 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=29998
	uSNCreated=17270
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=886 Alexander Ridges Suite 360, West William, OK 83863
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/05/2025 12:20:14.110
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=John Taylor
	distinguishedName=CN=John Taylor,OU=Executive,OU=Departments,DC=allports,DC=local
	givenName=John
	sn=Taylor
	cn=John Taylor
Object Details:
	sAMAccountType=805306368
	sAMAccountName=jtaylor
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-1467035127-280533777-406903113-2045
	primaryGroupID=513
	pwdLastSet=12:08.31 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=c1bbb30a-7cc1-4d25-8b34-e8e862a50e32
	whenChanged=12:20.14 PM, Wed 11/05/2025
	whenCreated=12:08.31 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=29996
	uSNCreated=18453
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=80159 Rebekah Tunnel, Kevinmouth, NY 57903
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=CISO


_raw:
11/05/2025 12:20:14.110
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Alessia Ross
	distinguishedName=CN=Alessia Ross,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Alessia
	sn=Ross
	cn=Alessia Ross
Object Details:
	sAMAccountType=805306368
	sAMAccountName=aross1
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-1467035127-280533777-406903113-1969
	primaryGroupID=513
	pwdLastSet=12:08.27 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=d5095603-5a90-418f-9cf3-f60e49829084
	whenChanged=12:20.14 PM, Wed 11/05/2025
	whenCreated=12:08.27 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=29994
	uSNCreated=17989
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=4994 Kathleen Overpass Apt. 818, Port Larryborough, ND 84763
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/05/2025 12:20:14.063
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Container,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=AdminSDHolder
	distinguishedName=CN=AdminSDHolder,CN=System,DC=allports,DC=local
	cn=AdminSDHolder
Object Details:
	objectGUID=1bdc0e2f-4d68-45fe-b4f6-146000a1e166
	whenChanged=12:20.14 PM, Wed 11/05/2025
	whenCreated=12:03.48 PM, Wed 11/05/2025
	objectClass=top|container
Event Details:
	uSNChanged=29992
	uSNCreated=5704
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170503.0Z|16010101000000.0Z
	isCriticalSystemObject=TRUE
	systemFlags=-1946157056
	showInAdvancedViewOnly=TRUE


_raw:
11/05/2025 12:19:51.960
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Domain Controllers
	distinguishedName=CN=Domain Controllers,CN=Users,DC=allports,DC=local
	cn=Domain Controllers
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Domain Controllers
	objectSid=S-1-5-21-800331240-1825789736-4262157369-516
	objectGUID=4f054b7f-dfc9-4a58-870c-3066e7cef3d4
	whenChanged=12:19.51 PM, Wed 11/05/2025
	whenCreated=12:04.39 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30058
	uSNCreated=12333
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170439.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483646
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local
	description=All domain controllers in the domain


_raw:
11/05/2025 12:19:51.957
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Read-only Domain Controllers
	distinguishedName=CN=Read-only Domain Controllers,CN=Users,DC=allports,DC=local
	cn=Read-only Domain Controllers
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Read-only Domain Controllers
	objectSid=S-1-5-21-800331240-1825789736-4262157369-521
	objectGUID=a21ff74b-f5b2-4b7d-aca6-aeb9cce9d5cb
	whenChanged=12:19.51 PM, Wed 11/05/2025
	whenCreated=12:04.39 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30057
	uSNCreated=12419
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170439.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483646
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local
	description=Members of this group are Read-Only Domain Controllers in the domain


_raw:
11/05/2025 12:19:51.933
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=krbtgt
	distinguishedName=CN=krbtgt,CN=Users,DC=allports,DC=local
	cn=krbtgt
Object Details:
	sAMAccountType=805306368
	sAMAccountName=krbtgt
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-800331240-1825789736-4262157369-502
	primaryGroupID=513
	pwdLastSet=12:04.39 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=514
	objectGUID=bf3d125b-5c08-40f2-be07-58b6add66a59
	whenChanged=12:19.51 PM, Wed 11/05/2025
	whenCreated=12:04.39 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30055
	uSNCreated=12324
	instanceType=4
Additional Details:
	msDS-SupportedEncryptionTypes=0
	dSCorePropagationData=20251105170439.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	servicePrincipalName=kadmin/changepw
	adminCount=1
	showInAdvancedViewOnly=TRUE
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local
	description=Key Distribution Center Service Account


_raw:
11/05/2025 12:19:51.917
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Administrators
	distinguishedName=CN=Administrators,CN=Builtin,DC=allports,DC=local
	cn=Administrators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Administrators
	objectSid=S-1-5-32-544
	objectGUID=214617fa-eeab-40de-82a6-0e0321e665f1
	whenChanged=12:19.51 PM, Wed 11/05/2025
	whenCreated=12:03.37 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30054
	uSNCreated=8201
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170439.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	member=CN=Domain Admins,CN=Users,DC=allports,DC=local|CN=Enterprise Admins,CN=Users,DC=allports,DC=local|CN=Admin,CN=Users,DC=allports,DC=local|CN=cloudbase-init,CN=Users,DC=allports,DC=local|CN=Administrator,CN=Users,DC=allports,DC=local
	description=Administrators have complete and unrestricted access to the computer/domain


_raw:
11/05/2025 12:19:51.901
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Account Operators
	distinguishedName=CN=Account Operators,CN=Builtin,DC=allports,DC=local
	cn=Account Operators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Account Operators
	objectSid=S-1-5-32-548
	objectGUID=9f602dcb-69c1-481d-b595-ba9cdeb929f6
	whenChanged=12:19.51 PM, Wed 11/05/2025
	whenCreated=12:04.39 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30052
	uSNCreated=12363
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170439.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Members can administer domain user and group accounts


_raw:
11/05/2025 12:19:51.885
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Print Operators
	distinguishedName=CN=Print Operators,CN=Builtin,DC=allports,DC=local
	cn=Print Operators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Print Operators
	objectSid=S-1-5-32-550
	objectGUID=07cc82bf-3b1c-4d72-baea-937ca7ad200b
	whenChanged=12:19.51 PM, Wed 11/05/2025
	whenCreated=12:03.37 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30051
	uSNCreated=8215
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170439.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Members can administer printers installed on domain controllers


_raw:
11/05/2025 12:19:51.870
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Backup Operators
	distinguishedName=CN=Backup Operators,CN=Builtin,DC=allports,DC=local
	cn=Backup Operators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Backup Operators
	objectSid=S-1-5-32-551
	objectGUID=8618469d-f5c8-4827-b67c-c0aa02d88d9f
	whenChanged=12:19.51 PM, Wed 11/05/2025
	whenCreated=12:03.37 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30049
	uSNCreated=8216
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170439.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Backup Operators can override security restrictions for the sole purpose of backing up or restoring files


_raw:
11/05/2025 12:19:51.839
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Server Operators
	distinguishedName=CN=Server Operators,CN=Builtin,DC=allports,DC=local
	cn=Server Operators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Server Operators
	objectSid=S-1-5-32-549
	objectGUID=2e6f3156-44b4-4591-98e6-f418237451c2
	whenChanged=12:19.51 PM, Wed 11/05/2025
	whenCreated=12:04.39 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30047
	uSNCreated=12360
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170439.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Members can administer domain servers


_raw:
11/05/2025 12:19:51.823
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Replicator
	distinguishedName=CN=Replicator,CN=Builtin,DC=allports,DC=local
	cn=Replicator
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Replicator
	objectSid=S-1-5-32-552
	objectGUID=744cec2f-e421-4cc9-9fbc-a72fd99dc8d4
	whenChanged=12:19.51 PM, Wed 11/05/2025
	whenCreated=12:03.37 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30046
	uSNCreated=8217
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170439.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Supports file replication in a domain


_raw:
11/05/2025 12:19:51.792
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Domain Admins
	distinguishedName=CN=Domain Admins,CN=Users,DC=allports,DC=local
	cn=Domain Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Domain Admins
	objectSid=S-1-5-21-800331240-1825789736-4262157369-512
	objectGUID=158239fc-a4d3-40e2-a485-1ee0dd0826c7
	whenChanged=12:19.51 PM, Wed 11/05/2025
	whenCreated=12:04.39 PM, Wed 11/05/2025
	objectClass=top|group
Event Details:
	uSNChanged=30044
	uSNCreated=12345
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170439.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483646
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	member=CN=Logan Clark,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Eleanor Moore,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Isabella Clark,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=James Porter,OU=Executive,OU=Departments,DC=allports,DC=local|CN=Josie Young,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=David Carter,OU=Executive,OU=Departments,DC=allports,DC=local|CN=Bailey Finn,OU=Administration,OU=Departments,DC=allports,DC=local|CN=Kevin Miller,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Linda Vega,OU=Executive,OU=Departments,DC=allports,DC=local|CN=Ethan Fisher,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Michael Rivera,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Emily Carter,OU=Executive,OU=Departments,DC=allports,DC=local|CN=Penelope Brooks,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Kai Hill,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=John Taylor,OU=Executive,OU=Departments,DC=allports,DC=local|CN=Axel White,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Alessia Ross,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Nora Nelson,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Sarah Hill,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Olivia Collins,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Erick Smith,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Administrator,CN=Users,DC=allports,DC=local
	description=Designated administrators of the domain


_raw:
11/05/2025 12:19:51.760
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Administrator
	distinguishedName=CN=Administrator,CN=Users,DC=allports,DC=local
	cn=Administrator
Object Details:
	sAMAccountType=805306368
	sAMAccountName=Administrator
	logonCount=1
	accountExpires=0
	objectSid=S-1-5-21-800331240-1825789736-4262157369-500
	primaryGroupID=513
	pwdLastSet=11:56.20 AM, Wed 11/05/2025
	lastLogon=12:47.08 PM, Tue 06/21/2022
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=6862f3fb-5f09-4da2-be38-41e2b4de2aaf
	whenChanged=12:19.51 PM, Wed 11/05/2025
	whenCreated=12:03.37 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30043
	uSNCreated=8196
	instanceType=4
Additional Details:
	dSCorePropagationData=20251105170439.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	adminCount=1
	logonHours=<binary>
	memberOf=CN=Group Policy Creator Owners,CN=Users,DC=allports,DC=local|CN=Domain Admins,CN=Users,DC=allports,DC=local|CN=Enterprise Admins,CN=Users,DC=allports,DC=local|CN=Schema Admins,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	description=Built-in account for administering the computer/domain


_raw:
11/05/2025 12:19:51.745
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Logan Clark
	distinguishedName=CN=Logan Clark,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Logan
	sn=Clark
	cn=Logan Clark
Object Details:
	sAMAccountType=805306368
	sAMAccountName=lclark1
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-800331240-1825789736-4262157369-3910
	primaryGroupID=513
	pwdLastSet=12:10.32 PM, Wed 11/05/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=1167bcf4-a6d6-4d13-8171-1fd3bb3247ce
	whenChanged=12:19.51 PM, Wed 11/05/2025
	whenCreated=12:10.32 PM, Wed 11/05/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30041
	uSNCreated=29704
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=29325 Rebecca Estate, Lake Ronald, CO 85102
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer