_raw:
11/09/2025 09:29:42.033
dcName=LDAP://APT-DC-01.allports.local/
admonEventType=schema
className=nTDSDSA
classCN=NTDS-DSA
instanceType=MandatoryProperties
nTSecurityDescriptor=MandatoryProperties
objectCategory=MandatoryProperties
objectClass=MandatoryProperties
instanceType=OptionalProperties
nTSecurityDescriptor=OptionalProperties
objectCategory=OptionalProperties
objectClass=OptionalProperties
adminDescription=OptionalProperties
adminDisplayName=OptionalProperties
allowedAttributes=OptionalProperties
allowedAttributesEffective=OptionalProperties
allowedChildClasses=OptionalProperties
allowedChildClassesEffective=OptionalProperties
applicationName=OptionalProperties
bridgeheadServerListBL=OptionalProperties
canonicalName=OptionalProperties
cn=OptionalProperties
createTimeStamp=OptionalProperties
description=OptionalProperties
directReports=OptionalProperties
displayName=OptionalProperties
displayNamePrintable=OptionalProperties
distinguishedName=OptionalProperties
dMDLocation=OptionalProperties
dSASignature=OptionalProperties
dSCorePropagationData=OptionalProperties
extensionName=OptionalProperties
flags=OptionalProperties
fromEntry=OptionalProperties
frsComputerReferenceBL=OptionalProperties
fRSMemberReferenceBL=OptionalProperties
fRSRootPath=OptionalProperties
fSMORoleOwner=OptionalProperties
hasMasterNCs=OptionalProperties
hasPartialReplicaNCs=OptionalProperties
invocationId=OptionalProperties
isCriticalSystemObject=OptionalProperties
isDeleted=OptionalProperties
isPrivilegeHolder=OptionalProperties
isRecycled=OptionalProperties
lastBackupRestorationTime=OptionalProperties
lastKnownParent=OptionalProperties
managedBy=OptionalProperties
managedObjects=OptionalProperties
masteredBy=OptionalProperties
memberOf=OptionalProperties
modifyTimeStamp=OptionalProperties
mS-DS-ConsistencyChildCount=OptionalProperties
mS-DS-ConsistencyGuid=OptionalProperties
msCOM-PartitionSetLink=OptionalProperties
msCOM-UserLink=OptionalProperties
msDFSR-ComputerReferenceBL=OptionalProperties
msDFSR-MemberReferenceBL=OptionalProperties
msDS-Approx-Immed-Subordinates=OptionalProperties
msDS-AuthenticatedToAccountlist=OptionalProperties
msDS-Behavior-Version=OptionalProperties
msDS-ClaimSharesPossibleValuesWithBL=OptionalProperties
msDS-CloudAnchor=OptionalProperties
msDS-EnabledFeature=OptionalProperties
msDS-EnabledFeatureBL=OptionalProperties
msDS-HasDomainNCs=OptionalProperties
msDS-hasFullReplicaNCs=OptionalProperties
msDS-HasInstantiatedNCs=OptionalProperties
msDS-hasMasterNCs=OptionalProperties
msDS-HostServiceAccountBL=OptionalProperties
msDS-IsDomainFor=OptionalProperties
msDS-IsFullReplicaFor=OptionalProperties
msDS-isGC=OptionalProperties
msDS-IsPartialReplicaFor=OptionalProperties
msDS-IsPrimaryComputerFor=OptionalProperties
msDS-isRODC=OptionalProperties
msDS-IsUserCachableAtRodc=OptionalProperties
msDS-KrbTgtLinkBl=OptionalProperties
msDS-LastKnownRDN=OptionalProperties
msDS-LocalEffectiveDeletionTime=OptionalProperties
msDS-LocalEffectiveRecycleTime=OptionalProperties
msDs-masteredBy=OptionalProperties
msds-memberOfTransitive=OptionalProperties
msDS-MembersForAzRoleBL=OptionalProperties
msDS-MembersOfResourcePropertyListBL=OptionalProperties
msds-memberTransitive=OptionalProperties
msDS-NC-RO-Replica-Locations-BL=OptionalProperties
msDS-NCReplCursors=OptionalProperties
msDS-NCReplInboundNeighbors=OptionalProperties
msDS-NCReplOutboundNeighbors=OptionalProperties
msDS-NcType=OptionalProperties
msDS-NeverRevealGroup=OptionalProperties
msDS-NonMembersBL=OptionalProperties
msDS-ObjectReferenceBL=OptionalProperties
msDS-ObjectSoa=OptionalProperties
msDS-OIDToGroupLinkBl=OptionalProperties
msDS-OperationsForAzRoleBL=OptionalProperties
msDS-OperationsForAzTaskBL=OptionalProperties
msDS-parentdistname=OptionalProperties
msDS-PrincipalName=OptionalProperties
msDS-PSOApplied=OptionalProperties
msDS-ReplAttributeMetaData=OptionalProperties
msDS-ReplicationEpoch=OptionalProperties
msDS-ReplValueMetaData=OptionalProperties
msDS-ReplValueMetaDataExt=OptionalProperties
msDS-RetiredReplNCSignatures=OptionalProperties
msDS-RevealedDSAs=OptionalProperties
msDS-RevealedListBL=OptionalProperties
msDS-RevealedUsers=OptionalProperties
msDS-RevealOnDemandGroup=OptionalProperties
msDS-Settings=OptionalProperties
msDS-SiteName=OptionalProperties
msDS-SourceAnchor=OptionalProperties
msDS-TasksForAzRoleBL=OptionalProperties
msDS-TasksForAzTaskBL=OptionalProperties
msDS-TDOEgressBL=OptionalProperties
msDS-TDOIngressBL=OptionalProperties
msDS-ValueTypeReferenceBL=OptionalProperties
msSFU30PosixMemberOf=OptionalProperties
name=OptionalProperties
netbootSCPBL=OptionalProperties
networkAddress=OptionalProperties
nonSecurityMemberBL=OptionalProperties
notificationList=OptionalProperties
objectGUID=OptionalProperties
objectVersion=OptionalProperties
options=OptionalProperties
otherWellKnownObjects=OptionalProperties
ownerBL=OptionalProperties
partialAttributeDeletionList=OptionalProperties
partialAttributeSet=OptionalProperties
possibleInferiors=OptionalProperties
proxiedObjectName=OptionalProperties
proxyAddresses=OptionalProperties
queryPolicyBL=OptionalProperties
queryPolicyObject=OptionalProperties
replPropertyMetaData=OptionalProperties
replUpToDateVector=OptionalProperties
repsFrom=OptionalProperties
repsTo=OptionalProperties
retiredReplDSASignatures=OptionalProperties
revision=OptionalProperties
sDRightsEffective=OptionalProperties
serverReference=OptionalProperties
serverReferenceBL=OptionalProperties
showInAdvancedViewOnly=OptionalProperties
siteObjectBL=OptionalProperties
structuralObjectClass=OptionalProperties
subRefs=OptionalProperties
subSchemaSubEntry=OptionalProperties
systemFlags=OptionalProperties
url=OptionalProperties
uSNChanged=OptionalProperties
uSNCreated=OptionalProperties
uSNDSALastObjRemoved=OptionalProperties
USNIntersite=OptionalProperties
uSNLastObjRem=OptionalProperties
uSNSource=OptionalProperties
wbemPath=OptionalProperties
wellKnownObjects=OptionalProperties
whenChanged=OptionalProperties
whenCreated=OptionalProperties
wWWHomePage=OptionalProperties


_raw:
11/09/2025 09:29:42.033
dcName=LDAP://APT-DC-01.allports.local/
admonEventType=schema
className=organization
classCN=Organization
instanceType=MandatoryProperties
nTSecurityDescriptor=MandatoryProperties
o=MandatoryProperties
objectCategory=MandatoryProperties
objectClass=MandatoryProperties
instanceType=OptionalProperties
nTSecurityDescriptor=OptionalProperties
o=OptionalProperties
objectCategory=OptionalProperties
objectClass=OptionalProperties
adminDescription=OptionalProperties
adminDisplayName=OptionalProperties
allowedAttributes=OptionalProperties
allowedAttributesEffective=OptionalProperties
allowedChildClasses=OptionalProperties
allowedChildClassesEffective=OptionalProperties
bridgeheadServerListBL=OptionalProperties
businessCategory=OptionalProperties
canonicalName=OptionalProperties
cn=OptionalProperties
createTimeStamp=OptionalProperties
description=OptionalProperties
destinationIndicator=OptionalProperties
directReports=OptionalProperties
displayName=OptionalProperties
displayNamePrintable=OptionalProperties
distinguishedName=OptionalProperties
dSASignature=OptionalProperties
dSCorePropagationData=OptionalProperties
extensionName=OptionalProperties
facsimileTelephoneNumber=OptionalProperties
flags=OptionalProperties
fromEntry=OptionalProperties
frsComputerReferenceBL=OptionalProperties
fRSMemberReferenceBL=OptionalProperties
fSMORoleOwner=OptionalProperties
internationalISDNNumber=OptionalProperties
isCriticalSystemObject=OptionalProperties
isDeleted=OptionalProperties
isPrivilegeHolder=OptionalProperties
isRecycled=OptionalProperties
l=OptionalProperties
lastKnownParent=OptionalProperties
managedObjects=OptionalProperties
masteredBy=OptionalProperties
memberOf=OptionalProperties
modifyTimeStamp=OptionalProperties
mS-DS-ConsistencyChildCount=OptionalProperties
mS-DS-ConsistencyGuid=OptionalProperties
msCOM-PartitionSetLink=OptionalProperties
msCOM-UserLink=OptionalProperties
msDFSR-ComputerReferenceBL=OptionalProperties
msDFSR-MemberReferenceBL=OptionalProperties
msDS-Approx-Immed-Subordinates=OptionalProperties
msDS-AuthenticatedToAccountlist=OptionalProperties
msDS-ClaimSharesPossibleValuesWithBL=OptionalProperties
msDS-CloudAnchor=OptionalProperties
msDS-EnabledFeatureBL=OptionalProperties
msDS-HostServiceAccountBL=OptionalProperties
msDS-IsDomainFor=OptionalProperties
msDS-IsFullReplicaFor=OptionalProperties
msDS-IsPartialReplicaFor=OptionalProperties
msDS-IsPrimaryComputerFor=OptionalProperties
msDS-KrbTgtLinkBl=OptionalProperties
msDS-LastKnownRDN=OptionalProperties
msDS-LocalEffectiveDeletionTime=OptionalProperties
msDS-LocalEffectiveRecycleTime=OptionalProperties
msDs-masteredBy=OptionalProperties
msds-memberOfTransitive=OptionalProperties
msDS-MembersForAzRoleBL=OptionalProperties
msDS-MembersOfResourcePropertyListBL=OptionalProperties
msds-memberTransitive=OptionalProperties
msDS-NC-RO-Replica-Locations-BL=OptionalProperties
msDS-NCReplCursors=OptionalProperties
msDS-NCReplInboundNeighbors=OptionalProperties
msDS-NCReplOutboundNeighbors=OptionalProperties
msDS-NcType=OptionalProperties
msDS-NonMembersBL=OptionalProperties
msDS-ObjectReferenceBL=OptionalProperties
msDS-ObjectSoa=OptionalProperties
msDS-OIDToGroupLinkBl=OptionalProperties
msDS-OperationsForAzRoleBL=OptionalProperties
msDS-OperationsForAzTaskBL=OptionalProperties
msDS-parentdistname=OptionalProperties
msDS-PrincipalName=OptionalProperties
msDS-PSOApplied=OptionalProperties
msDS-ReplAttributeMetaData=OptionalProperties
msDS-ReplValueMetaData=OptionalProperties
msDS-ReplValueMetaDataExt=OptionalProperties
msDS-RevealedDSAs=OptionalProperties
msDS-RevealedListBL=OptionalProperties
msDS-SourceAnchor=OptionalProperties
msDS-TasksForAzRoleBL=OptionalProperties
msDS-TasksForAzTaskBL=OptionalProperties
msDS-TDOEgressBL=OptionalProperties
msDS-TDOIngressBL=OptionalProperties
msDS-ValueTypeReferenceBL=OptionalProperties
msSFU30PosixMemberOf=OptionalProperties
name=OptionalProperties
netbootSCPBL=OptionalProperties
nonSecurityMemberBL=OptionalProperties
objectGUID=OptionalProperties
objectVersion=OptionalProperties
otherWellKnownObjects=OptionalProperties
ownerBL=OptionalProperties
partialAttributeDeletionList=OptionalProperties
partialAttributeSet=OptionalProperties
physicalDeliveryOfficeName=OptionalProperties
possibleInferiors=OptionalProperties
postalAddress=OptionalProperties
postalCode=OptionalProperties
postOfficeBox=OptionalProperties
preferredDeliveryMethod=OptionalProperties
proxiedObjectName=OptionalProperties
proxyAddresses=OptionalProperties
queryPolicyBL=OptionalProperties
registeredAddress=OptionalProperties
replPropertyMetaData=OptionalProperties
replUpToDateVector=OptionalProperties
repsFrom=OptionalProperties
repsTo=OptionalProperties
revision=OptionalProperties
sDRightsEffective=OptionalProperties
searchGuide=OptionalProperties
seeAlso=OptionalProperties
serverReferenceBL=OptionalProperties
showInAdvancedViewOnly=OptionalProperties
siteObjectBL=OptionalProperties
st=OptionalProperties
street=OptionalProperties
structuralObjectClass=OptionalProperties
subRefs=OptionalProperties
subSchemaSubEntry=OptionalProperties
systemFlags=OptionalProperties
telephoneNumber=OptionalProperties
teletexTerminalIdentifier=OptionalProperties
telexNumber=OptionalProperties
url=OptionalProperties
userPassword=OptionalProperties
uSNChanged=OptionalProperties
uSNCreated=OptionalProperties
uSNDSALastObjRemoved=OptionalProperties
USNIntersite=OptionalProperties
uSNLastObjRem=OptionalProperties
uSNSource=OptionalProperties
wbemPath=OptionalProperties
wellKnownObjects=OptionalProperties
whenChanged=OptionalProperties
whenCreated=OptionalProperties
wWWHomePage=OptionalProperties
x121Address=OptionalProperties

_sourcetype: ActiveDirectory

source: ActiveDirectory

sourcetype: ActiveDirectory


_raw:
11/09/2025 09:29:42.001
dcName=APT-DC-01.allports.local
admonEventType=Start
Names:
	objectCategory=CN=NTDS-DSA,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=NTDS Settings
	distinguishedName=CN=NTDS Settings,CN=APT-DC-01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=allports,DC=local
	cn=NTDS Settings
Object Details:
	objectGUID=9a376ebf-0062-4d83-a7cc-e5d8e17964d0
	whenChanged=09:00.26 AM, Sun 11/09/2025
	whenCreated=08:54.12 AM, Sun 11/09/2025
	objectClass=top|applicationSettings|nTDSDSA
Event Details:
	uSNChanged=23666
	uSNCreated=5814
	instanceType=4
Additional Details:
	msDS-hasMasterNCs=DC=ForestDnsZones,DC=allports,DC=local|DC=DomainDnsZones,DC=allports,DC=local|CN=Schema,CN=Configuration,DC=allports,DC=local|CN=Configuration,DC=allports,DC=local|DC=allports,DC=local
	msDS-HasDomainNCs=DC=allports,DC=local
	msDS-HasInstantiatedNCs=B:8:0000000D:DC=ForestDnsZones,DC=allports,DC=local|B:8:0000000D:DC=DomainDnsZones,DC=allports,DC=local|B:8:0000000D:CN=Schema,CN=Configuration,DC=allports,DC=local|B:8:0000000D:CN=Configuration,DC=allports,DC=local|B:8:00000005:DC=allports,DC=local
	msDS-Behavior-Version=7
	dSCorePropagationData=20251109135516.0Z|16010101000004.0Z
	serverReferenceBL=CN=APT-DC-01,CN=Topology,CN=Domain System Volume,CN=DFSR-GlobalSettings,CN=System,DC=allports,DC=local
	systemFlags=33554432
	options=1
	showInAdvancedViewOnly=TRUE
	invocationId=<binary>
	dMDLocation=CN=Schema,CN=Configuration,DC=allports,DC=local
	hasMasterNCs=CN=Schema,CN=Configuration,DC=allports,DC=local|CN=Configuration,DC=allports,DC=local|DC=allports,DC=local


_raw:
11/09/2025 09:22:16.836
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=DECKHAND-02
	distinguishedName=CN=DECKHAND-02,CN=Computers,DC=allports,DC=local
	cn=DECKHAND-02
Object Details:
	sAMAccountType=805306369
	sAMAccountName=DECKHAND-02$
	logonCount=6
	accountExpires=Never Expires
	objectSid=S-1-5-21-1911343735-4077512063-1846243016-3956
	primaryGroupID=515
	pwdLastSet=09:21.22 AM, Sun 11/09/2025
	lastLogon=09:22.16 AM, Sun 11/09/2025
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4096
	objectGUID=76e4ddb6-25ef-4a82-8d7b-22a51b0de9f5
	whenChanged=09:22.16 AM, Sun 11/09/2025
	whenCreated=09:21.22 AM, Sun 11/09/2025
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=30105
	uSNCreated=30079
	instanceType=4
Additional Details:
	lastLogonTimestamp=09:21.22 AM, Sun 11/09/2025
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	servicePrincipalName=WSMAN/Deckhand-02|WSMAN/Deckhand-02.allports.local|TERMSRV/DECKHAND-02|TERMSRV/Deckhand-02.allports.local|RestrictedKrbHost/DECKHAND-02|HOST/DECKHAND-02|RestrictedKrbHost/Deckhand-02.allports.local|HOST/Deckhand-02.allports.local
	dNSHostName=Deckhand-02.allports.local
	localPolicyFlags=0


_raw:
11/09/2025 09:22:16.555
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=DECKHAND-02
	distinguishedName=CN=DECKHAND-02,CN=Computers,DC=allports,DC=local
	cn=DECKHAND-02
Object Details:
	sAMAccountType=805306369
	sAMAccountName=DECKHAND-02$
	logonCount=6
	accountExpires=Never Expires
	objectSid=S-1-5-21-1911343735-4077512063-1846243016-3956
	primaryGroupID=515
	pwdLastSet=09:21.22 AM, Sun 11/09/2025
	lastLogon=09:22.16 AM, Sun 11/09/2025
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4096
	objectGUID=76e4ddb6-25ef-4a82-8d7b-22a51b0de9f5
	whenChanged=09:22.16 AM, Sun 11/09/2025
	whenCreated=09:21.22 AM, Sun 11/09/2025
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=30104
	uSNCreated=30079
	instanceType=4
Additional Details:
	lastLogonTimestamp=09:21.22 AM, Sun 11/09/2025
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	servicePrincipalName=TERMSRV/DECKHAND-02|TERMSRV/Deckhand-02.allports.local|RestrictedKrbHost/DECKHAND-02|HOST/DECKHAND-02|RestrictedKrbHost/Deckhand-02.allports.local|HOST/Deckhand-02.allports.local
	dNSHostName=Deckhand-02.allports.local
	localPolicyFlags=0


_raw:
11/09/2025 09:22:16.555
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=DECKHAND-02
	distinguishedName=CN=DECKHAND-02,CN=Computers,DC=allports,DC=local
	cn=DECKHAND-02
Object Details:
	sAMAccountType=805306369
	sAMAccountName=DECKHAND-02$
	logonCount=6
	accountExpires=Never Expires
	objectSid=S-1-5-21-1911343735-4077512063-1846243016-3956
	primaryGroupID=515
	pwdLastSet=09:21.22 AM, Sun 11/09/2025
	lastLogon=09:22.16 AM, Sun 11/09/2025
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4096
	objectGUID=76e4ddb6-25ef-4a82-8d7b-22a51b0de9f5
	whenChanged=09:22.16 AM, Sun 11/09/2025
	whenCreated=09:21.22 AM, Sun 11/09/2025
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=30103
	uSNCreated=30079
	instanceType=4
Additional Details:
	lastLogonTimestamp=09:21.22 AM, Sun 11/09/2025
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	servicePrincipalName=TERMSRV/Deckhand-02.allports.local|RestrictedKrbHost/DECKHAND-02|HOST/DECKHAND-02|RestrictedKrbHost/Deckhand-02.allports.local|HOST/Deckhand-02.allports.local
	dNSHostName=Deckhand-02.allports.local
	localPolicyFlags=0


_raw:
11/09/2025 09:21:49.092
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=DECKHAND-01
	distinguishedName=CN=DECKHAND-01,CN=Computers,DC=allports,DC=local
	cn=DECKHAND-01
Object Details:
	sAMAccountType=805306369
	sAMAccountName=DECKHAND-01$
	logonCount=5
	accountExpires=Never Expires
	objectSid=S-1-5-21-1911343735-4077512063-1846243016-3955
	primaryGroupID=515
	pwdLastSet=09:20.44 AM, Sun 11/09/2025
	lastLogon=09:21.48 AM, Sun 11/09/2025
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4096
	objectGUID=9cf42755-1511-4b86-bccb-2ab13bc60ef1
	whenChanged=09:21.49 AM, Sun 11/09/2025
	whenCreated=09:20.44 AM, Sun 11/09/2025
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=30093
	uSNCreated=30070
	instanceType=4
Additional Details:
	lastLogonTimestamp=09:20.44 AM, Sun 11/09/2025
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	servicePrincipalName=WSMAN/Deckhand-01|WSMAN/Deckhand-01.allports.local|TERMSRV/DECKHAND-01|TERMSRV/Deckhand-01.allports.local|RestrictedKrbHost/DECKHAND-01|HOST/DECKHAND-01|RestrictedKrbHost/Deckhand-01.allports.local|HOST/Deckhand-01.allports.local
	dNSHostName=Deckhand-01.allports.local
	localPolicyFlags=0


_raw:
11/09/2025 09:21:48.842
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=DECKHAND-01
	distinguishedName=CN=DECKHAND-01,CN=Computers,DC=allports,DC=local
	cn=DECKHAND-01
Object Details:
	sAMAccountType=805306369
	sAMAccountName=DECKHAND-01$
	logonCount=5
	accountExpires=Never Expires
	objectSid=S-1-5-21-1911343735-4077512063-1846243016-3955
	primaryGroupID=515
	pwdLastSet=09:20.44 AM, Sun 11/09/2025
	lastLogon=09:21.48 AM, Sun 11/09/2025
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4096
	objectGUID=9cf42755-1511-4b86-bccb-2ab13bc60ef1
	whenChanged=09:21.48 AM, Sun 11/09/2025
	whenCreated=09:20.44 AM, Sun 11/09/2025
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=30092
	uSNCreated=30070
	instanceType=4
Additional Details:
	lastLogonTimestamp=09:20.44 AM, Sun 11/09/2025
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	servicePrincipalName=TERMSRV/DECKHAND-01|TERMSRV/Deckhand-01.allports.local|RestrictedKrbHost/DECKHAND-01|HOST/DECKHAND-01|RestrictedKrbHost/Deckhand-01.allports.local|HOST/Deckhand-01.allports.local
	dNSHostName=Deckhand-01.allports.local
	localPolicyFlags=0


_raw:
11/09/2025 09:21:48.842
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=DECKHAND-01
	distinguishedName=CN=DECKHAND-01,CN=Computers,DC=allports,DC=local
	cn=DECKHAND-01
Object Details:
	sAMAccountType=805306369
	sAMAccountName=DECKHAND-01$
	logonCount=5
	accountExpires=Never Expires
	objectSid=S-1-5-21-1911343735-4077512063-1846243016-3955
	primaryGroupID=515
	pwdLastSet=09:20.44 AM, Sun 11/09/2025
	lastLogon=09:21.48 AM, Sun 11/09/2025
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4096
	objectGUID=9cf42755-1511-4b86-bccb-2ab13bc60ef1
	whenChanged=09:21.48 AM, Sun 11/09/2025
	whenCreated=09:20.44 AM, Sun 11/09/2025
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=30091
	uSNCreated=30070
	instanceType=4
Additional Details:
	lastLogonTimestamp=09:20.44 AM, Sun 11/09/2025
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	servicePrincipalName=TERMSRV/Deckhand-01.allports.local|RestrictedKrbHost/DECKHAND-01|HOST/DECKHAND-01|RestrictedKrbHost/Deckhand-01.allports.local|HOST/Deckhand-01.allports.local
	dNSHostName=Deckhand-01.allports.local
	localPolicyFlags=0


_raw:
11/09/2025 09:21:22.580
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=DECKHAND-02
	distinguishedName=CN=DECKHAND-02,CN=Computers,DC=allports,DC=local
	cn=DECKHAND-02
Object Details:
	sAMAccountType=805306369
	sAMAccountName=DECKHAND-02$
	logonCount=1
	accountExpires=Never Expires
	objectSid=S-1-5-21-1911343735-4077512063-1846243016-3956
	primaryGroupID=515
	pwdLastSet=09:21.22 AM, Sun 11/09/2025
	lastLogon=09:21.22 AM, Sun 11/09/2025
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4096
	objectGUID=76e4ddb6-25ef-4a82-8d7b-22a51b0de9f5
	whenChanged=09:21.22 AM, Sun 11/09/2025
	whenCreated=09:21.22 AM, Sun 11/09/2025
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=30082
	uSNCreated=30079
	instanceType=4
Additional Details:
	lastLogonTimestamp=09:21.22 AM, Sun 11/09/2025
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	servicePrincipalName=RestrictedKrbHost/DECKHAND-02|HOST/DECKHAND-02|RestrictedKrbHost/Deckhand-02.allports.local|HOST/Deckhand-02.allports.local
	dNSHostName=Deckhand-02.allports.local
	localPolicyFlags=0


_raw:
11/09/2025 09:21:22.470
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=DECKHAND-02
	distinguishedName=CN=DECKHAND-02,CN=Computers,DC=allports,DC=local
	cn=DECKHAND-02
Object Details:
	sAMAccountType=805306369
	sAMAccountName=DECKHAND-02$
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-1911343735-4077512063-1846243016-3956
	primaryGroupID=515
	pwdLastSet=09:21.22 AM, Sun 11/09/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4096
	objectGUID=76e4ddb6-25ef-4a82-8d7b-22a51b0de9f5
	whenChanged=09:21.22 AM, Sun 11/09/2025
	whenCreated=09:21.22 AM, Sun 11/09/2025
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=30081
	uSNCreated=30079
	instanceType=4
Additional Details:
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	servicePrincipalName=RestrictedKrbHost/DECKHAND-02|HOST/DECKHAND-02|RestrictedKrbHost/Deckhand-02.allports.local|HOST/Deckhand-02.allports.local
	dNSHostName=Deckhand-02.allports.local
	localPolicyFlags=0


_raw:
11/09/2025 09:20:44.829
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=DECKHAND-01
	distinguishedName=CN=DECKHAND-01,CN=Computers,DC=allports,DC=local
	cn=DECKHAND-01
Object Details:
	sAMAccountType=805306369
	sAMAccountName=DECKHAND-01$
	logonCount=1
	accountExpires=Never Expires
	objectSid=S-1-5-21-1911343735-4077512063-1846243016-3955
	primaryGroupID=515
	pwdLastSet=09:20.44 AM, Sun 11/09/2025
	lastLogon=09:20.44 AM, Sun 11/09/2025
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4096
	objectGUID=9cf42755-1511-4b86-bccb-2ab13bc60ef1
	whenChanged=09:20.44 AM, Sun 11/09/2025
	whenCreated=09:20.44 AM, Sun 11/09/2025
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=30073
	uSNCreated=30070
	instanceType=4
Additional Details:
	lastLogonTimestamp=09:20.44 AM, Sun 11/09/2025
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	servicePrincipalName=RestrictedKrbHost/DECKHAND-01|HOST/DECKHAND-01|RestrictedKrbHost/Deckhand-01.allports.local|HOST/Deckhand-01.allports.local
	dNSHostName=Deckhand-01.allports.local
	localPolicyFlags=0


_raw:
11/09/2025 09:20:44.704
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Computer,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=DECKHAND-01
	distinguishedName=CN=DECKHAND-01,CN=Computers,DC=allports,DC=local
	cn=DECKHAND-01
Object Details:
	sAMAccountType=805306369
	sAMAccountName=DECKHAND-01$
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-1911343735-4077512063-1846243016-3955
	primaryGroupID=515
	pwdLastSet=09:20.44 AM, Sun 11/09/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=4096
	objectGUID=9cf42755-1511-4b86-bccb-2ab13bc60ef1
	whenChanged=09:20.44 AM, Sun 11/09/2025
	whenCreated=09:20.44 AM, Sun 11/09/2025
	objectClass=top|person|organizationalPerson|user|computer
Event Details:
	uSNChanged=30072
	uSNCreated=30070
	instanceType=4
Additional Details:
	dSCorePropagationData=16010101000000.0Z
	isCriticalSystemObject=FALSE
	servicePrincipalName=RestrictedKrbHost/DECKHAND-01|HOST/DECKHAND-01|RestrictedKrbHost/Deckhand-01.allports.local|HOST/Deckhand-01.allports.local
	dNSHostName=Deckhand-01.allports.local
	localPolicyFlags=0


_raw:
11/09/2025 09:20:44.485
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Administrator
	distinguishedName=CN=Administrator,CN=Users,DC=allports,DC=local
	cn=Administrator
Object Details:
	sAMAccountType=805306368
	sAMAccountName=Administrator
	logonCount=2
	accountExpires=0
	objectSid=S-1-5-21-1911343735-4077512063-1846243016-500
	primaryGroupID=513
	pwdLastSet=08:47.07 AM, Sun 11/09/2025
	lastLogon=09:20.44 AM, Sun 11/09/2025
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=f15ac84b-cf15-4954-85e9-d61602074bbb
	whenChanged=09:20.44 AM, Sun 11/09/2025
	whenCreated=08:54.13 AM, Sun 11/09/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30067
	uSNCreated=8196
	instanceType=4
Additional Details:
	lastLogonTimestamp=09:20.44 AM, Sun 11/09/2025
	dSCorePropagationData=20251109141027.0Z|20251109141027.0Z|20251109135516.0Z|16010101181216.0Z
	isCriticalSystemObject=TRUE
	adminCount=1
	logonHours=<binary>
	memberOf=CN=Group Policy Creator Owners,CN=Users,DC=allports,DC=local|CN=Domain Admins,CN=Users,DC=allports,DC=local|CN=Enterprise Admins,CN=Users,DC=allports,DC=local|CN=Schema Admins,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	description=Built-in account for administering the computer/domain


_raw:
11/09/2025 09:18:55.407
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Lorelai Peterson
	distinguishedName=CN=Lorelai Peterson,OU=Refreshments,OU=Departments,DC=allports,DC=local
	givenName=Lorelai
	sn=Peterson
	cn=Lorelai Peterson
Object Details:
	sAMAccountType=805306368
	sAMAccountName=lpeterson
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-1911343735-4077512063-1846243016-3118
	primaryGroupID=513
	pwdLastSet=09:00.39 AM, Sun 11/09/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=7a9655c1-0396-44d7-865e-05fead486c43
	whenChanged=09:18.55 AM, Sun 11/09/2025
	whenCreated=09:00.39 AM, Sun 11/09/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30066
	uSNCreated=24937
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	lastLogonTimestamp=09:18.55 AM, Sun 11/09/2025
	dSCorePropagationData=16010101000000.0Z
	streetAddress=5755 Pelican Ct, Springfield, MA 65657
	title=Buffet Attendant


_raw:
11/09/2025 09:18:55.360
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Scarlet Campbell
	distinguishedName=CN=Scarlet Campbell,OU=Engineering,OU=Departments,DC=allports,DC=local
	givenName=Scarlet
	sn=Campbell
	cn=Scarlet Campbell
Object Details:
	sAMAccountType=805306368
	sAMAccountName=scampbell
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-1911343735-4077512063-1846243016-1701
	primaryGroupID=513
	pwdLastSet=08:59.05 AM, Sun 11/09/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=96878b68-5fb1-42b7-a6e8-0be196d7f39b
	whenChanged=09:18.55 AM, Sun 11/09/2025
	whenCreated=08:59.05 AM, Sun 11/09/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30065
	uSNCreated=16387
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	lastLogonTimestamp=09:18.55 AM, Sun 11/09/2025
	dSCorePropagationData=16010101000000.0Z
	streetAddress=8367 Seaside Ave, Springfield, CA 39906
	title=Electrician


_raw:
11/09/2025 09:18:55.298
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Kai Hill
	distinguishedName=CN=Kai Hill,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Kai
	sn=Hill
	cn=Kai Hill
Object Details:
	sAMAccountType=805306368
	sAMAccountName=khill
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-1911343735-4077512063-1846243016-2217
	primaryGroupID=513
	pwdLastSet=08:59.40 AM, Sun 11/09/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=274e8d61-cb29-48eb-b317-1ddc1e9a4e24
	whenChanged=09:18.55 AM, Sun 11/09/2025
	whenCreated=08:59.40 AM, Sun 11/09/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30064
	uSNCreated=19500
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	lastLogonTimestamp=09:18.55 AM, Sun 11/09/2025
	dSCorePropagationData=20251109141027.0Z|16010101000000.0Z
	adminCount=1
	streetAddress=20294 Fletcher Turnpike, Fostertown, DE 39758
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/09/2025 09:18:55.204
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Olivia Sanders
	distinguishedName=CN=Olivia Sanders,OU=Refreshments,OU=Departments,DC=allports,DC=local
	givenName=Olivia
	sn=Sanders
	cn=Olivia Sanders
Object Details:
	sAMAccountType=805306368
	sAMAccountName=osanders
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-1911343735-4077512063-1846243016-1263
	primaryGroupID=513
	pwdLastSet=08:58.36 AM, Sun 11/09/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=9ed9c8b0-b9ca-4acb-89a5-1f5bbf34077e
	whenChanged=09:18.55 AM, Sun 11/09/2025
	whenCreated=08:58.36 AM, Sun 11/09/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30063
	uSNCreated=13746
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	lastLogonTimestamp=09:18.55 AM, Sun 11/09/2025
	dSCorePropagationData=16010101000000.0Z
	streetAddress=8794 Mindy Mount, North Tarachester, KS 47134
	title=Bartender


_raw:
11/09/2025 09:18:54.204
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Bailey Finn
	distinguishedName=CN=Bailey Finn,OU=Administration,OU=Departments,DC=allports,DC=local
	givenName=Bailey
	sn=Finn
	cn=Bailey Finn
Object Details:
	sAMAccountType=805306368
	sAMAccountName=bfinn
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-1911343735-4077512063-1846243016-2789
	primaryGroupID=513
	pwdLastSet=09:00.18 AM, Sun 11/09/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=1dd4405f-9e85-4519-aca5-fecf1043beef
	whenChanged=09:18.54 AM, Sun 11/09/2025
	whenCreated=09:00.18 AM, Sun 11/09/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30062
	uSNCreated=22943
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	lastLogonTimestamp=09:18.54 AM, Sun 11/09/2025
	dSCorePropagationData=20251109141027.0Z|16010101000000.0Z
	adminCount=1
	streetAddress=USNS Jackson, FPO AP 90789
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Director of Technical Services


_raw:
11/09/2025 09:18:54.173
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=AI Service
	distinguishedName=CN=AI Service,OU=Refreshments,OU=Departments,DC=allports,DC=local
	givenName=AI
	sn=Service
	cn=AI Service
Object Details:
	sAMAccountType=805306368
	sAMAccountName=ai.svc
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-1911343735-4077512063-1846243016-2783
	primaryGroupID=513
	pwdLastSet=09:00.18 AM, Sun 11/09/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=686648d3-8035-4ac7-8c1d-28236670a882
	whenChanged=09:18.54 AM, Sun 11/09/2025
	whenCreated=09:00.18 AM, Sun 11/09/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30061
	uSNCreated=22907
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	lastLogonTimestamp=09:18.54 AM, Sun 11/09/2025
	dSCorePropagationData=16010101000000.0Z
	streetAddress=9623 Coral St, Seabreeze, TX 98998
	title=Service Account


_raw:
11/09/2025 09:10:27.706
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Read-only Domain Controllers
	distinguishedName=CN=Read-only Domain Controllers,CN=Users,DC=allports,DC=local
	cn=Read-only Domain Controllers
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Read-only Domain Controllers
	objectSid=S-1-5-21-1911343735-4077512063-1846243016-521
	objectGUID=87ea0e4d-92d1-435f-b866-965eac2d29d4
	whenChanged=09:10.27 AM, Sun 11/09/2025
	whenCreated=08:55.16 AM, Sun 11/09/2025
	objectClass=top|group
Event Details:
	uSNChanged=30059
	uSNCreated=12419
	instanceType=4
Additional Details:
	dSCorePropagationData=20251109135516.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483646
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local
	description=Members of this group are Read-Only Domain Controllers in the domain


_raw:
11/09/2025 09:10:27.690
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Domain Controllers
	distinguishedName=CN=Domain Controllers,CN=Users,DC=allports,DC=local
	cn=Domain Controllers
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Domain Controllers
	objectSid=S-1-5-21-1911343735-4077512063-1846243016-516
	objectGUID=9b3f840e-e900-4821-8140-e760d4ffce7c
	whenChanged=09:10.27 AM, Sun 11/09/2025
	whenCreated=08:55.15 AM, Sun 11/09/2025
	objectClass=top|group
Event Details:
	uSNChanged=30058
	uSNCreated=12333
	instanceType=4
Additional Details:
	dSCorePropagationData=20251109135516.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483646
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local
	description=All domain controllers in the domain


_raw:
11/09/2025 09:10:27.660
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=krbtgt
	distinguishedName=CN=krbtgt,CN=Users,DC=allports,DC=local
	cn=krbtgt
Object Details:
	sAMAccountType=805306368
	sAMAccountName=krbtgt
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-1911343735-4077512063-1846243016-502
	primaryGroupID=513
	pwdLastSet=08:55.15 AM, Sun 11/09/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=514
	objectGUID=5c11a768-b9f1-425a-8af8-54b4af7ff161
	whenChanged=09:10.27 AM, Sun 11/09/2025
	whenCreated=08:55.15 AM, Sun 11/09/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30057
	uSNCreated=12324
	instanceType=4
Additional Details:
	msDS-SupportedEncryptionTypes=0
	dSCorePropagationData=20251109135516.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	servicePrincipalName=kadmin/changepw
	adminCount=1
	showInAdvancedViewOnly=TRUE
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local
	description=Key Distribution Center Service Account


_raw:
11/09/2025 09:10:27.628
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Administrators
	distinguishedName=CN=Administrators,CN=Builtin,DC=allports,DC=local
	cn=Administrators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Administrators
	objectSid=S-1-5-32-544
	objectGUID=bf9147ee-da73-4d5a-9095-e6dfbe301200
	whenChanged=09:10.27 AM, Sun 11/09/2025
	whenCreated=08:54.13 AM, Sun 11/09/2025
	objectClass=top|group
Event Details:
	uSNChanged=30055
	uSNCreated=8201
	instanceType=4
Additional Details:
	dSCorePropagationData=20251109135516.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	member=CN=Domain Admins,CN=Users,DC=allports,DC=local|CN=Enterprise Admins,CN=Users,DC=allports,DC=local|CN=Admin,CN=Users,DC=allports,DC=local|CN=cloudbase-init,CN=Users,DC=allports,DC=local|CN=Administrator,CN=Users,DC=allports,DC=local
	description=Administrators have complete and unrestricted access to the computer/domain


_raw:
11/09/2025 09:10:27.612
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Replicator
	distinguishedName=CN=Replicator,CN=Builtin,DC=allports,DC=local
	cn=Replicator
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Replicator
	objectSid=S-1-5-32-552
	objectGUID=1ae093c5-273e-4255-90af-35b0bf9495fa
	whenChanged=09:10.27 AM, Sun 11/09/2025
	whenCreated=08:54.13 AM, Sun 11/09/2025
	objectClass=top|group
Event Details:
	uSNChanged=30053
	uSNCreated=8217
	instanceType=4
Additional Details:
	dSCorePropagationData=20251109135516.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Supports file replication in a domain


_raw:
11/09/2025 09:10:27.581
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Print Operators
	distinguishedName=CN=Print Operators,CN=Builtin,DC=allports,DC=local
	cn=Print Operators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Print Operators
	objectSid=S-1-5-32-550
	objectGUID=32f26ca4-471c-4b11-b847-a5549fa70d24
	whenChanged=09:10.27 AM, Sun 11/09/2025
	whenCreated=08:54.13 AM, Sun 11/09/2025
	objectClass=top|group
Event Details:
	uSNChanged=30051
	uSNCreated=8215
	instanceType=4
Additional Details:
	dSCorePropagationData=20251109135516.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Members can administer printers installed on domain controllers


_raw:
11/09/2025 09:10:27.565
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Server Operators
	distinguishedName=CN=Server Operators,CN=Builtin,DC=allports,DC=local
	cn=Server Operators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Server Operators
	objectSid=S-1-5-32-549
	objectGUID=586a1c8a-c2f1-47e0-8854-790c450194b4
	whenChanged=09:10.27 AM, Sun 11/09/2025
	whenCreated=08:55.15 AM, Sun 11/09/2025
	objectClass=top|group
Event Details:
	uSNChanged=30049
	uSNCreated=12360
	instanceType=4
Additional Details:
	dSCorePropagationData=20251109135516.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Members can administer domain servers


_raw:
11/09/2025 09:10:27.565
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Account Operators
	distinguishedName=CN=Account Operators,CN=Builtin,DC=allports,DC=local
	cn=Account Operators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Account Operators
	objectSid=S-1-5-32-548
	objectGUID=946eaa3d-7cb2-49d4-be8d-69bd2efb1aca
	whenChanged=09:10.27 AM, Sun 11/09/2025
	whenCreated=08:55.15 AM, Sun 11/09/2025
	objectClass=top|group
Event Details:
	uSNChanged=30048
	uSNCreated=12363
	instanceType=4
Additional Details:
	dSCorePropagationData=20251109135516.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Members can administer domain user and group accounts


_raw:
11/09/2025 09:10:27.550
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Backup Operators
	distinguishedName=CN=Backup Operators,CN=Builtin,DC=allports,DC=local
	cn=Backup Operators
Object Details:
	sAMAccountType=536870912
	sAMAccountName=Backup Operators
	objectSid=S-1-5-32-551
	objectGUID=7c4e0e03-2862-4a82-89f5-52262b6d14a7
	whenChanged=09:10.27 AM, Sun 11/09/2025
	whenCreated=08:54.13 AM, Sun 11/09/2025
	objectClass=top|group
Event Details:
	uSNChanged=30047
	uSNCreated=8216
	instanceType=4
Additional Details:
	dSCorePropagationData=20251109135516.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483643
	systemFlags=-1946157056
	adminCount=1
	description=Backup Operators can override security restrictions for the sole purpose of backing up or restoring files


_raw:
11/09/2025 09:10:27.519
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Enterprise Key Admins
	distinguishedName=CN=Enterprise Key Admins,CN=Users,DC=allports,DC=local
	cn=Enterprise Key Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Enterprise Key Admins
	objectSid=S-1-5-21-1911343735-4077512063-1846243016-527
	objectGUID=bc8075f9-b2c6-4e07-a6f4-e904a7b328f0
	whenChanged=09:10.27 AM, Sun 11/09/2025
	whenCreated=08:55.16 AM, Sun 11/09/2025
	objectClass=top|group
Event Details:
	uSNChanged=30045
	uSNCreated=12453
	instanceType=4
Additional Details:
	dSCorePropagationData=20251109135516.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483640
	adminCount=1
	description=Members of this group can perform administrative actions on key objects within the forest.


_raw:
11/09/2025 09:10:27.503
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=John Taylor
	distinguishedName=CN=John Taylor,OU=Executive,OU=Departments,DC=allports,DC=local
	givenName=John
	sn=Taylor
	cn=John Taylor
Object Details:
	sAMAccountType=805306368
	sAMAccountName=jtaylor
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-1911343735-4077512063-1846243016-3328
	primaryGroupID=513
	pwdLastSet=09:00.53 AM, Sun 11/09/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=8e6567f6-473f-4236-a9d1-ae6a1faa042a
	whenChanged=09:10.27 AM, Sun 11/09/2025
	whenCreated=09:00.53 AM, Sun 11/09/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30044
	uSNCreated=26197
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=80159 Rebekah Tunnel, Kevinmouth, NY 57903
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=CISO


_raw:
11/09/2025 09:10:27.503
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Eleanor Moore
	distinguishedName=CN=Eleanor Moore,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Eleanor
	sn=Moore
	cn=Eleanor Moore
Object Details:
	sAMAccountType=805306368
	sAMAccountName=emoore
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-1911343735-4077512063-1846243016-2202
	primaryGroupID=513
	pwdLastSet=08:59.39 AM, Sun 11/09/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=a9c6ffd5-dae6-43e2-b8e3-11522f1a2456
	whenChanged=09:10.27 AM, Sun 11/09/2025
	whenCreated=08:59.39 AM, Sun 11/09/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30042
	uSNCreated=19404
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=212 James Vista, Porterport, NH 76563
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/09/2025 09:10:27.472
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Logan Clark
	distinguishedName=CN=Logan Clark,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Logan
	sn=Clark
	cn=Logan Clark
Object Details:
	sAMAccountType=805306368
	sAMAccountName=lclark1
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-1911343735-4077512063-1846243016-2671
	primaryGroupID=513
	pwdLastSet=09:00.10 AM, Sun 11/09/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=054a44bc-b6b2-4245-96fb-5b9fbc12b3ea
	whenChanged=09:10.27 AM, Sun 11/09/2025
	whenCreated=09:00.10 AM, Sun 11/09/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30040
	uSNCreated=22232
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=29325 Rebecca Estate, Lake Ronald, CO 85102
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/09/2025 09:10:27.456
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Olivia Collins
	distinguishedName=CN=Olivia Collins,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Olivia
	sn=Collins
	cn=Olivia Collins
Object Details:
	sAMAccountType=805306368
	sAMAccountName=ocollins
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-1911343735-4077512063-1846243016-3109
	primaryGroupID=513
	pwdLastSet=09:00.39 AM, Sun 11/09/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=74999fbb-b7cb-4843-9a7c-2f74cf8e21ca
	whenChanged=09:10.27 AM, Sun 11/09/2025
	whenCreated=09:00.39 AM, Sun 11/09/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30038
	uSNCreated=24880
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=24735 Webster Locks, North Jonathanton, MD 97223
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/09/2025 09:10:27.425
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Emily Carter
	distinguishedName=CN=Emily Carter,OU=Executive,OU=Departments,DC=allports,DC=local
	givenName=Emily
	sn=Carter
	cn=Emily Carter
Object Details:
	sAMAccountType=805306368
	sAMAccountName=ecarter
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-1911343735-4077512063-1846243016-1117
	primaryGroupID=513
	pwdLastSet=08:58.26 AM, Sun 11/09/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=cd03eab8-fb4b-477b-a9cd-9f974fca9b9e
	whenChanged=09:10.27 AM, Sun 11/09/2025
	whenCreated=08:58.26 AM, Sun 11/09/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30036
	uSNCreated=12847
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=5325 Rogers Village, Lydiaport, KY 37558
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Co-Founder & COO


_raw:
11/09/2025 09:10:27.394
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=James Porter
	distinguishedName=CN=James Porter,OU=Executive,OU=Departments,DC=allports,DC=local
	givenName=James
	sn=Porter
	cn=James Porter
Object Details:
	sAMAccountType=805306368
	sAMAccountName=jporter
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-1911343735-4077512063-1846243016-1898
	primaryGroupID=513
	pwdLastSet=08:59.18 AM, Sun 11/09/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=7c4705b1-7b3b-41dd-9ba3-1c2800d95b1e
	whenChanged=09:10.27 AM, Sun 11/09/2025
	whenCreated=08:59.18 AM, Sun 11/09/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30034
	uSNCreated=17574
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=25652 Desiree Forge, West Juliefurt, OR 59085
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=CFO


_raw:
11/09/2025 09:10:27.378
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Penelope Brooks
	distinguishedName=CN=Penelope Brooks,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Penelope
	sn=Brooks
	cn=Penelope Brooks
Object Details:
	sAMAccountType=805306368
	sAMAccountName=pbrooks
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-1911343735-4077512063-1846243016-1163
	primaryGroupID=513
	pwdLastSet=08:58.29 AM, Sun 11/09/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=d5c82c8c-0a0a-4767-8372-86947363404c
	whenChanged=09:10.27 AM, Sun 11/09/2025
	whenCreated=08:58.29 AM, Sun 11/09/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30032
	uSNCreated=13136
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=373 Dickson Pike, Darrenstad, VA 06979
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/09/2025 09:10:27.362
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Michael Rivera
	distinguishedName=CN=Michael Rivera,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Michael
	sn=Rivera
	cn=Michael Rivera
Object Details:
	sAMAccountType=805306368
	sAMAccountName=mrivera1
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-1911343735-4077512063-1846243016-1508
	primaryGroupID=513
	pwdLastSet=08:58.53 AM, Sun 11/09/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=9b4d7a88-4d18-421a-8d61-880f86a67a8b
	whenChanged=09:10.27 AM, Sun 11/09/2025
	whenCreated=08:58.53 AM, Sun 11/09/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30030
	uSNCreated=15226
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=11949 Gray Meadows Apt. 897, Lindseyberg, NV 06447
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/09/2025 09:10:27.347
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Axel White
	distinguishedName=CN=Axel White,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Axel
	sn=White
	cn=Axel White
Object Details:
	sAMAccountType=805306368
	sAMAccountName=awhite1
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-1911343735-4077512063-1846243016-1430
	primaryGroupID=513
	pwdLastSet=08:58.48 AM, Sun 11/09/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=13c69885-6986-440b-8a56-5a7a6697d7db
	whenChanged=09:10.27 AM, Sun 11/09/2025
	whenCreated=08:58.48 AM, Sun 11/09/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30028
	uSNCreated=14752
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=2130 David Mount, West Meganland, AZ 73217
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/09/2025 09:10:27.331
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=David Carter
	distinguishedName=CN=David Carter,OU=Executive,OU=Departments,DC=allports,DC=local
	givenName=David
	sn=Carter
	cn=David Carter
Object Details:
	sAMAccountType=805306368
	sAMAccountName=dcarter
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-1911343735-4077512063-1846243016-2211
	primaryGroupID=513
	pwdLastSet=08:59.40 AM, Sun 11/09/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=aa66e883-86f1-49aa-8b02-3a0c0a00c3da
	whenChanged=09:10.27 AM, Sun 11/09/2025
	whenCreated=08:59.40 AM, Sun 11/09/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30026
	uSNCreated=19461
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=80034 Stark Walks Apt. 756, Mcdanielberg, WY 73366
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Co-Founder & CEO


_raw:
11/09/2025 09:10:27.300
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Schema Admins
	distinguishedName=CN=Schema Admins,CN=Users,DC=allports,DC=local
	cn=Schema Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Schema Admins
	objectSid=S-1-5-21-1911343735-4077512063-1846243016-518
	objectGUID=6a030e83-f349-4118-8b41-a7b9fd6fb90d
	whenChanged=09:10.27 AM, Sun 11/09/2025
	whenCreated=08:55.15 AM, Sun 11/09/2025
	objectClass=top|group
Event Details:
	uSNChanged=30024
	uSNCreated=12336
	instanceType=4
Additional Details:
	dSCorePropagationData=20251109135516.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483640
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local
	member=CN=Administrator,CN=Users,DC=allports,DC=local
	description=Designated administrators of the schema


_raw:
11/09/2025 09:10:27.284
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Domain Admins
	distinguishedName=CN=Domain Admins,CN=Users,DC=allports,DC=local
	cn=Domain Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Domain Admins
	objectSid=S-1-5-21-1911343735-4077512063-1846243016-512
	objectGUID=1fa61881-2a7e-40bf-92b7-7bfd1d3af0ae
	whenChanged=09:10.27 AM, Sun 11/09/2025
	whenCreated=08:55.15 AM, Sun 11/09/2025
	objectClass=top|group
Event Details:
	uSNChanged=30023
	uSNCreated=12345
	instanceType=4
Additional Details:
	dSCorePropagationData=20251109135516.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483646
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	member=CN=Josie Young,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Kevin Miller,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Linda Vega,OU=Executive,OU=Departments,DC=allports,DC=local|CN=John Taylor,OU=Executive,OU=Departments,DC=allports,DC=local|CN=Olivia Collins,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Erick Smith,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Bailey Finn,OU=Administration,OU=Departments,DC=allports,DC=local|CN=Logan Clark,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Nora Nelson,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Kai Hill,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=David Carter,OU=Executive,OU=Departments,DC=allports,DC=local|CN=Eleanor Moore,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Ethan Fisher,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=James Porter,OU=Executive,OU=Departments,DC=allports,DC=local|CN=Alessia Ross,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Michael Rivera,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Isabella Clark,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Axel White,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Sarah Hill,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Penelope Brooks,OU=Information Technology,OU=Departments,DC=allports,DC=local|CN=Emily Carter,OU=Executive,OU=Departments,DC=allports,DC=local|CN=Administrator,CN=Users,DC=allports,DC=local
	description=Designated administrators of the domain


_raw:
11/09/2025 09:10:27.269
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=cloudbase-init
	displayName=cloudbase-init
	distinguishedName=CN=cloudbase-init,CN=Users,DC=allports,DC=local
	cn=cloudbase-init
Object Details:
	sAMAccountType=805306368
	sAMAccountName=cloudbase-init
	logonCount=5
	accountExpires=Never Expires
	objectSid=S-1-5-21-1911343735-4077512063-1846243016-1000
	primaryGroupID=513
	pwdLastSet=08:45.34 AM, Sun 11/09/2025
	lastLogon=08:55.56 AM, Sun 11/09/2025
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=66048
	objectGUID=7242d37f-02e6-465b-901b-bdc1e044cab3
	whenChanged=09:10.27 AM, Sun 11/09/2025
	whenCreated=08:54.13 AM, Sun 11/09/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30022
	uSNCreated=8198
	instanceType=4
Additional Details:
	lastLogonTimestamp=08:55.56 AM, Sun 11/09/2025
	dSCorePropagationData=20251109135516.0Z|16010101000001.0Z
	adminCount=1
	memberOf=CN=Administrators,CN=Builtin,DC=allports,DC=local


_raw:
11/09/2025 09:10:27.253
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Kai Hill
	distinguishedName=CN=Kai Hill,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Kai
	sn=Hill
	cn=Kai Hill
Object Details:
	sAMAccountType=805306368
	sAMAccountName=khill
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-1911343735-4077512063-1846243016-2217
	primaryGroupID=513
	pwdLastSet=08:59.40 AM, Sun 11/09/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=274e8d61-cb29-48eb-b317-1ddc1e9a4e24
	whenChanged=09:10.27 AM, Sun 11/09/2025
	whenCreated=08:59.40 AM, Sun 11/09/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30020
	uSNCreated=19500
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=20294 Fletcher Turnpike, Fostertown, DE 39758
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/09/2025 09:10:27.238
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Kevin Miller
	distinguishedName=CN=Kevin Miller,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Kevin
	sn=Miller
	cn=Kevin Miller
Object Details:
	sAMAccountType=805306368
	sAMAccountName=kmiller
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-1911343735-4077512063-1846243016-3539
	primaryGroupID=513
	pwdLastSet=09:01.06 AM, Sun 11/09/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=3e957e60-a96e-49a5-860e-9d7517509cc6
	whenChanged=09:10.27 AM, Sun 11/09/2025
	whenCreated=09:01.06 AM, Sun 11/09/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30018
	uSNCreated=27474
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=041 Ronnie Branch, Oconnellfort, WV 97644
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/09/2025 09:10:27.206
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Bailey Finn
	distinguishedName=CN=Bailey Finn,OU=Administration,OU=Departments,DC=allports,DC=local
	givenName=Bailey
	sn=Finn
	cn=Bailey Finn
Object Details:
	sAMAccountType=805306368
	sAMAccountName=bfinn
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-1911343735-4077512063-1846243016-2789
	primaryGroupID=513
	pwdLastSet=09:00.18 AM, Sun 11/09/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=1dd4405f-9e85-4519-aca5-fecf1043beef
	whenChanged=09:10.27 AM, Sun 11/09/2025
	whenCreated=09:00.18 AM, Sun 11/09/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30016
	uSNCreated=22943
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=USNS Jackson, FPO AP 90789
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Director of Technical Services


_raw:
11/09/2025 09:10:27.175
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Enterprise Admins
	distinguishedName=CN=Enterprise Admins,CN=Users,DC=allports,DC=local
	cn=Enterprise Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Enterprise Admins
	objectSid=S-1-5-21-1911343735-4077512063-1846243016-519
	objectGUID=f0cbe158-f062-424a-8db8-21f9c3495fc7
	whenChanged=09:10.27 AM, Sun 11/09/2025
	whenCreated=08:55.15 AM, Sun 11/09/2025
	objectClass=top|group
Event Details:
	uSNChanged=30014
	uSNCreated=12339
	instanceType=4
Additional Details:
	dSCorePropagationData=20251109135516.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483640
	adminCount=1
	memberOf=CN=Denied RODC Password Replication Group,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	member=CN=Administrator,CN=Users,DC=allports,DC=local
	description=Designated administrators of the enterprise


_raw:
11/09/2025 09:10:27.159
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Alessia Ross
	distinguishedName=CN=Alessia Ross,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Alessia
	sn=Ross
	cn=Alessia Ross
Object Details:
	sAMAccountType=805306368
	sAMAccountName=aross1
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-1911343735-4077512063-1846243016-1769
	primaryGroupID=513
	pwdLastSet=08:59.10 AM, Sun 11/09/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=10522655-76ad-4c03-ac09-485f48755197
	whenChanged=09:10.27 AM, Sun 11/09/2025
	whenCreated=08:59.10 AM, Sun 11/09/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30013
	uSNCreated=16795
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=4994 Kathleen Overpass Apt. 818, Port Larryborough, ND 84763
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/09/2025 09:10:27.144
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Administrator
	distinguishedName=CN=Administrator,CN=Users,DC=allports,DC=local
	cn=Administrator
Object Details:
	sAMAccountType=805306368
	sAMAccountName=Administrator
	logonCount=1
	accountExpires=0
	objectSid=S-1-5-21-1911343735-4077512063-1846243016-500
	primaryGroupID=513
	pwdLastSet=08:47.07 AM, Sun 11/09/2025
	lastLogon=12:47.08 PM, Tue 06/21/2022
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=f15ac84b-cf15-4954-85e9-d61602074bbb
	whenChanged=09:10.27 AM, Sun 11/09/2025
	whenCreated=08:54.13 AM, Sun 11/09/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30011
	uSNCreated=8196
	instanceType=4
Additional Details:
	dSCorePropagationData=20251109135516.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	adminCount=1
	logonHours=<binary>
	memberOf=CN=Group Policy Creator Owners,CN=Users,DC=allports,DC=local|CN=Domain Admins,CN=Users,DC=allports,DC=local|CN=Enterprise Admins,CN=Users,DC=allports,DC=local|CN=Schema Admins,CN=Users,DC=allports,DC=local|CN=Administrators,CN=Builtin,DC=allports,DC=local
	description=Built-in account for administering the computer/domain


_raw:
11/09/2025 09:10:27.144
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Isabella Clark
	distinguishedName=CN=Isabella Clark,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Isabella
	sn=Clark
	cn=Isabella Clark
Object Details:
	sAMAccountType=805306368
	sAMAccountName=iclark1
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-1911343735-4077512063-1846243016-1444
	primaryGroupID=513
	pwdLastSet=08:58.49 AM, Sun 11/09/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=badf344a-e84a-4733-8615-795e8dc5ced6
	whenChanged=09:10.27 AM, Sun 11/09/2025
	whenCreated=08:58.49 AM, Sun 11/09/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30009
	uSNCreated=14839
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=8686 Rachel Fords, Port Jason, NE 94930
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/09/2025 09:10:27.128
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Josie Young
	distinguishedName=CN=Josie Young,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Josie
	sn=Young
	cn=Josie Young
Object Details:
	sAMAccountType=805306368
	sAMAccountName=jyoung
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-1911343735-4077512063-1846243016-3924
	primaryGroupID=513
	pwdLastSet=09:01.31 AM, Sun 11/09/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=0e05f345-9ad0-415f-8802-acd3ffc5fee6
	whenChanged=09:10.27 AM, Sun 11/09/2025
	whenCreated=09:01.31 AM, Sun 11/09/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30007
	uSNCreated=29789
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=49085 Tucker Circles Suite 272, Novakborough, RI 93174
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/09/2025 09:10:27.128
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Linda Vega
	distinguishedName=CN=Linda Vega,OU=Executive,OU=Departments,DC=allports,DC=local
	givenName=Linda
	sn=Vega
	cn=Linda Vega
Object Details:
	sAMAccountType=805306368
	sAMAccountName=lvega
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-1911343735-4077512063-1846243016-3405
	primaryGroupID=513
	pwdLastSet=09:00.58 AM, Sun 11/09/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=bf1cf932-5b98-4330-b3f4-f145491d75ee
	whenChanged=09:10.27 AM, Sun 11/09/2025
	whenCreated=09:00.58 AM, Sun 11/09/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30005
	uSNCreated=26667
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=36745 Smith Drive, Grantberg, NJ 17682
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=CIO


_raw:
11/09/2025 09:10:27.128
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Ethan Fisher
	distinguishedName=CN=Ethan Fisher,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Ethan
	sn=Fisher
	cn=Ethan Fisher
Object Details:
	sAMAccountType=805306368
	sAMAccountName=efisher
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-1911343735-4077512063-1846243016-1927
	primaryGroupID=513
	pwdLastSet=08:59.20 AM, Sun 11/09/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=ecb5c22b-282d-401a-9512-6bcef4dbe16e
	whenChanged=09:10.27 AM, Sun 11/09/2025
	whenCreated=08:59.20 AM, Sun 11/09/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30003
	uSNCreated=17751
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=79800 Bruce Vista, Hortonberg, HI 64197
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/09/2025 09:10:27.113
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Sarah Hill
	distinguishedName=CN=Sarah Hill,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Sarah
	sn=Hill
	cn=Sarah Hill
Object Details:
	sAMAccountType=805306368
	sAMAccountName=shill
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-1911343735-4077512063-1846243016-1246
	primaryGroupID=513
	pwdLastSet=08:58.35 AM, Sun 11/09/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=76643d27-63bb-4059-81d1-721fbd5e8ea0
	whenChanged=09:10.27 AM, Sun 11/09/2025
	whenCreated=08:58.35 AM, Sun 11/09/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=30001
	uSNCreated=13641
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=837 Wolfe Street, Mitchellhaven, VT 83781
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/09/2025 09:10:27.113
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Admin
	displayName=Admin
	distinguishedName=CN=Admin,CN=Users,DC=allports,DC=local
	cn=Admin
Object Details:
	sAMAccountType=805306368
	sAMAccountName=Admin
	logonCount=1
	accountExpires=Never Expires
	objectSid=S-1-5-21-1911343735-4077512063-1846243016-1001
	primaryGroupID=513
	pwdLastSet=08:44.03 AM, Sun 11/09/2025
	lastLogon=08:43.12 AM, Sun 11/09/2025
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=66048
	objectGUID=312da91e-f98f-42f5-9048-58271dd679f7
	whenChanged=09:10.27 AM, Sun 11/09/2025
	whenCreated=08:54.13 AM, Sun 11/09/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=29999
	uSNCreated=8199
	instanceType=4
Additional Details:
	dSCorePropagationData=20251109135516.0Z|16010101000001.0Z
	adminCount=1
	memberOf=CN=Administrators,CN=Builtin,DC=allports,DC=local


_raw:
11/09/2025 09:10:27.113
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Group,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Key Admins
	distinguishedName=CN=Key Admins,CN=Users,DC=allports,DC=local
	cn=Key Admins
Object Details:
	sAMAccountType=268435456
	sAMAccountName=Key Admins
	objectSid=S-1-5-21-1911343735-4077512063-1846243016-526
	objectGUID=07d04108-0b9c-41b4-a17b-0f9029e03def
	whenChanged=09:10.27 AM, Sun 11/09/2025
	whenCreated=08:55.16 AM, Sun 11/09/2025
	objectClass=top|group
Event Details:
	uSNChanged=29997
	uSNCreated=12450
	instanceType=4
Additional Details:
	dSCorePropagationData=20251109135516.0Z|16010101000001.0Z
	isCriticalSystemObject=TRUE
	groupType=-2147483646
	adminCount=1
	description=Members of this group can perform administrative actions on key objects within the domain.


_raw:
11/09/2025 09:10:27.113
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Erick Smith
	distinguishedName=CN=Erick Smith,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Erick
	sn=Smith
	cn=Erick Smith
Object Details:
	sAMAccountType=805306368
	sAMAccountName=esmith
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-1911343735-4077512063-1846243016-3036
	primaryGroupID=513
	pwdLastSet=09:00.34 AM, Sun 11/09/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=fa3c5305-388b-4eb5-85ea-710fd2782d42
	whenChanged=09:10.27 AM, Sun 11/09/2025
	whenCreated=09:00.34 AM, Sun 11/09/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=29996
	uSNCreated=24439
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=569 Carrie Route Apt. 586, Lake James, NV 94321
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Systems Administrator


_raw:
11/09/2025 09:10:27.097
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Person,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=Nora Nelson
	distinguishedName=CN=Nora Nelson,OU=Information Technology,OU=Departments,DC=allports,DC=local
	givenName=Nora
	sn=Nelson
	cn=Nora Nelson
Object Details:
	sAMAccountType=805306368
	sAMAccountName=nnelson
	logonCount=0
	accountExpires=Never Expires
	objectSid=S-1-5-21-1911343735-4077512063-1846243016-2564
	primaryGroupID=513
	pwdLastSet=09:00.03 AM, Sun 11/09/2025
	lastLogon=0
	lastLogoff=0
	badPasswordTime=0
	countryCode=0
	codePage=0
	badPwdCount=0
	userAccountControl=512
	objectGUID=735db301-a21f-4169-a58e-8c3dfeea718f
	whenChanged=09:10.27 AM, Sun 11/09/2025
	whenCreated=09:00.03 AM, Sun 11/09/2025
	objectClass=top|person|organizationalPerson|user
Event Details:
	uSNChanged=29994
	uSNCreated=21587
	instanceType=4
Additional Details:
	mail=REDACTED_EMAIL
	dSCorePropagationData=16010101000000.0Z
	adminCount=1
	streetAddress=886 Alexander Ridges Suite 360, West William, OK 83863
	memberOf=CN=Domain Admins,CN=Users,DC=allports,DC=local
	title=Security Engineer


_raw:
11/09/2025 09:10:27.050
dcName=APT-DC-01.allports.local
admonEventType=Update
Names:
	objectCategory=CN=Container,CN=Schema,CN=Configuration,DC=allports,DC=local
	name=AdminSDHolder
	distinguishedName=CN=AdminSDHolder,CN=System,DC=allports,DC=local
	cn=AdminSDHolder
Object Details:
	objectGUID=1a6f8cc3-dab1-4ec7-8fa5-6a2ca60f6fbb
	whenChanged=09:10.26 AM, Sun 11/09/2025
	whenCreated=08:54.12 AM, Sun 11/09/2025
	objectClass=top|container
Event Details:
	uSNChanged=29992
	uSNCreated=5704
	instanceType=4
Additional Details:
	dSCorePropagationData=20251109135516.0Z|16010101000000.0Z
	isCriticalSystemObject=TRUE
	systemFlags=-1946157056
	showInAdvancedViewOnly=TRUE


_raw:
11/09/2025 09:06:18.905
dcName=LDAP://APT-DC-01.allports.local/
admonEventType=schema
className=dnsZoneScope
classCN=Dns-Zone-Scope
dc=MandatoryProperties
instanceType=MandatoryProperties
nTSecurityDescriptor=MandatoryProperties
objectCategory=MandatoryProperties
objectClass=MandatoryProperties
dc=OptionalProperties
instanceType=OptionalProperties
nTSecurityDescriptor=OptionalProperties
objectCategory=OptionalProperties
objectClass=OptionalProperties
adminDescription=OptionalProperties
adminDisplayName=OptionalProperties
allowedAttributes=OptionalProperties
allowedAttributesEffective=OptionalProperties
allowedChildClasses=OptionalProperties
allowedChildClassesEffective=OptionalProperties
bridgeheadServerListBL=OptionalProperties
canonicalName=OptionalProperties
cn=OptionalProperties
createTimeStamp=OptionalProperties
description=OptionalProperties
directReports=OptionalProperties
displayName=OptionalProperties
displayNamePrintable=OptionalProperties
distinguishedName=OptionalProperties
dNSProperty=OptionalProperties
dSASignature=OptionalProperties
dSCorePropagationData=OptionalProperties
extensionName=OptionalProperties
flags=OptionalProperties
fromEntry=OptionalProperties
frsComputerReferenceBL=OptionalProperties
fRSMemberReferenceBL=OptionalProperties
fSMORoleOwner=OptionalProperties
isCriticalSystemObject=OptionalProperties
isDeleted=OptionalProperties
isPrivilegeHolder=OptionalProperties
isRecycled=OptionalProperties
lastKnownParent=OptionalProperties
managedBy=OptionalProperties
managedObjects=OptionalProperties
masteredBy=OptionalProperties
memberOf=OptionalProperties
modifyTimeStamp=OptionalProperties
mS-DS-ConsistencyChildCount=OptionalProperties
mS-DS-ConsistencyGuid=OptionalProperties
msCOM-PartitionSetLink=OptionalProperties
msCOM-UserLink=OptionalProperties
msDFSR-ComputerReferenceBL=OptionalProperties
msDFSR-MemberReferenceBL=OptionalProperties
msDS-Approx-Immed-Subordinates=OptionalProperties
msDS-AuthenticatedToAccountlist=OptionalProperties
msDS-ClaimSharesPossibleValuesWithBL=OptionalProperties
msDS-CloudAnchor=OptionalProperties
msDS-EnabledFeatureBL=OptionalProperties
msDS-HostServiceAccountBL=OptionalProperties
msDS-IsDomainFor=OptionalProperties
msDS-IsFullReplicaFor=OptionalProperties
msDS-IsPartialReplicaFor=OptionalProperties
msDS-IsPrimaryComputerFor=OptionalProperties
msDS-KrbTgtLinkBl=OptionalProperties
msDS-LastKnownRDN=OptionalProperties
msDS-LocalEffectiveDeletionTime=OptionalProperties
msDS-LocalEffectiveRecycleTime=OptionalProperties
msDs-masteredBy=OptionalProperties
msds-memberOfTransitive=OptionalProperties
msDS-MembersForAzRoleBL=OptionalProperties
msDS-MembersOfResourcePropertyListBL=OptionalProperties
msds-memberTransitive=OptionalProperties
msDS-NC-RO-Replica-Locations-BL=OptionalProperties
msDS-NCReplCursors=OptionalProperties
msDS-NCReplInboundNeighbors=OptionalProperties
msDS-NCReplOutboundNeighbors=OptionalProperties
msDS-NcType=OptionalProperties
msDS-NonMembersBL=OptionalProperties
msDS-ObjectReferenceBL=OptionalProperties
msDS-ObjectSoa=OptionalProperties
msDS-OIDToGroupLinkBl=OptionalProperties
msDS-OperationsForAzRoleBL=OptionalProperties
msDS-OperationsForAzTaskBL=OptionalProperties
msDS-parentdistname=OptionalProperties
msDS-PrincipalName=OptionalProperties
msDS-PSOApplied=OptionalProperties
msDS-ReplAttributeMetaData=OptionalProperties
msDS-ReplValueMetaData=OptionalProperties
msDS-ReplValueMetaDataExt=OptionalProperties
msDS-RevealedDSAs=OptionalProperties
msDS-RevealedListBL=OptionalProperties
msDS-SourceAnchor=OptionalProperties
msDS-TasksForAzRoleBL=OptionalProperties
msDS-TasksForAzTaskBL=OptionalProperties
msDS-TDOEgressBL=OptionalProperties
msDS-TDOIngressBL=OptionalProperties
msDS-ValueTypeReferenceBL=OptionalProperties
msSFU30PosixMemberOf=OptionalProperties
name=OptionalProperties
netbootSCPBL=OptionalProperties
nonSecurityMemberBL=OptionalProperties
objectGUID=OptionalProperties
objectVersion=OptionalProperties
otherWellKnownObjects=OptionalProperties
ownerBL=OptionalProperties
partialAttributeDeletionList=OptionalProperties
partialAttributeSet=OptionalProperties
possibleInferiors=OptionalProperties
proxiedObjectName=OptionalProperties
proxyAddresses=OptionalProperties
queryPolicyBL=OptionalProperties
replPropertyMetaData=OptionalProperties
replUpToDateVector=OptionalProperties
repsFrom=OptionalProperties
repsTo=OptionalProperties
revision=OptionalProperties
sDRightsEffective=OptionalProperties
serverReferenceBL=OptionalProperties
showInAdvancedViewOnly=OptionalProperties
siteObjectBL=OptionalProperties
structuralObjectClass=OptionalProperties
subRefs=OptionalProperties
subSchemaSubEntry=OptionalProperties
systemFlags=OptionalProperties
url=OptionalProperties
uSNChanged=OptionalProperties
uSNCreated=OptionalProperties
uSNDSALastObjRemoved=OptionalProperties
USNIntersite=OptionalProperties
uSNLastObjRem=OptionalProperties
uSNSource=OptionalProperties
wbemPath=OptionalProperties
wellKnownObjects=OptionalProperties
whenChanged=OptionalProperties
whenCreated=OptionalProperties
wWWHomePage=OptionalProperties


_raw:
11/09/2025 09:06:18.905
dcName=LDAP://APT-DC-01.allports.local/
admonEventType=schema
className=dnsZoneScopeContainer
classCN=Dns-Zone-Scope-Container
instanceType=MandatoryProperties
nTSecurityDescriptor=MandatoryProperties
objectCategory=MandatoryProperties
objectClass=MandatoryProperties
instanceType=OptionalProperties
nTSecurityDescriptor=OptionalProperties
objectCategory=OptionalProperties
objectClass=OptionalProperties
adminDescription=OptionalProperties
adminDisplayName=OptionalProperties
allowedAttributes=OptionalProperties
allowedAttributesEffective=OptionalProperties
allowedChildClasses=OptionalProperties
allowedChildClassesEffective=OptionalProperties
bridgeheadServerListBL=OptionalProperties
canonicalName=OptionalProperties
cn=OptionalProperties
createTimeStamp=OptionalProperties
description=OptionalProperties
directReports=OptionalProperties
displayName=OptionalProperties
displayNamePrintable=OptionalProperties
distinguishedName=OptionalProperties
dSASignature=OptionalProperties
dSCorePropagationData=OptionalProperties
extensionName=OptionalProperties
flags=OptionalProperties
fromEntry=OptionalProperties
frsComputerReferenceBL=OptionalProperties
fRSMemberReferenceBL=OptionalProperties
fSMORoleOwner=OptionalProperties
isCriticalSystemObject=OptionalProperties
isDeleted=OptionalProperties
isPrivilegeHolder=OptionalProperties
isRecycled=OptionalProperties
lastKnownParent=OptionalProperties
managedObjects=OptionalProperties
masteredBy=OptionalProperties
memberOf=OptionalProperties
modifyTimeStamp=OptionalProperties
mS-DS-ConsistencyChildCount=OptionalProperties
mS-DS-ConsistencyGuid=OptionalProperties
msCOM-PartitionSetLink=OptionalProperties
msCOM-UserLink=OptionalProperties
msDFSR-ComputerReferenceBL=OptionalProperties
msDFSR-MemberReferenceBL=OptionalProperties
msDS-Approx-Immed-Subordinates=OptionalProperties
msDS-AuthenticatedToAccountlist=OptionalProperties
msDS-ClaimSharesPossibleValuesWithBL=OptionalProperties
msDS-CloudAnchor=OptionalProperties
msDS-EnabledFeatureBL=OptionalProperties
msDS-HostServiceAccountBL=OptionalProperties
msDS-IsDomainFor=OptionalProperties
msDS-IsFullReplicaFor=OptionalProperties
msDS-IsPartialReplicaFor=OptionalProperties
msDS-IsPrimaryComputerFor=OptionalProperties
msDS-KrbTgtLinkBl=OptionalProperties
msDS-LastKnownRDN=OptionalProperties
msDS-LocalEffectiveDeletionTime=OptionalProperties
msDS-LocalEffectiveRecycleTime=OptionalProperties
msDs-masteredBy=OptionalProperties
msds-memberOfTransitive=OptionalProperties
msDS-MembersForAzRoleBL=OptionalProperties
msDS-MembersOfResourcePropertyListBL=OptionalProperties
msds-memberTransitive=OptionalProperties
msDS-NC-RO-Replica-Locations-BL=OptionalProperties
msDS-NCReplCursors=OptionalProperties
msDS-NCReplInboundNeighbors=OptionalProperties
msDS-NCReplOutboundNeighbors=OptionalProperties
msDS-NcType=OptionalProperties
msDS-NonMembersBL=OptionalProperties
msDS-ObjectReferenceBL=OptionalProperties
msDS-ObjectSoa=OptionalProperties
msDS-OIDToGroupLinkBl=OptionalProperties
msDS-OperationsForAzRoleBL=OptionalProperties
msDS-OperationsForAzTaskBL=OptionalProperties
msDS-parentdistname=OptionalProperties
msDS-PrincipalName=OptionalProperties
msDS-PSOApplied=OptionalProperties
msDS-ReplAttributeMetaData=OptionalProperties
msDS-ReplValueMetaData=OptionalProperties
msDS-ReplValueMetaDataExt=OptionalProperties
msDS-RevealedDSAs=OptionalProperties
msDS-RevealedListBL=OptionalProperties
msDS-SourceAnchor=OptionalProperties
msDS-TasksForAzRoleBL=OptionalProperties
msDS-TasksForAzTaskBL=OptionalProperties
msDS-TDOEgressBL=OptionalProperties
msDS-TDOIngressBL=OptionalProperties
msDS-ValueTypeReferenceBL=OptionalProperties
msSFU30PosixMemberOf=OptionalProperties
name=OptionalProperties
netbootSCPBL=OptionalProperties
nonSecurityMemberBL=OptionalProperties
objectGUID=OptionalProperties
objectVersion=OptionalProperties
otherWellKnownObjects=OptionalProperties
ownerBL=OptionalProperties
partialAttributeDeletionList=OptionalProperties
partialAttributeSet=OptionalProperties
possibleInferiors=OptionalProperties
proxiedObjectName=OptionalProperties
proxyAddresses=OptionalProperties
queryPolicyBL=OptionalProperties
replPropertyMetaData=OptionalProperties
replUpToDateVector=OptionalProperties
repsFrom=OptionalProperties
repsTo=OptionalProperties
revision=OptionalProperties
sDRightsEffective=OptionalProperties
serverReferenceBL=OptionalProperties
showInAdvancedViewOnly=OptionalProperties
siteObjectBL=OptionalProperties
structuralObjectClass=OptionalProperties
subRefs=OptionalProperties
subSchemaSubEntry=OptionalProperties
systemFlags=OptionalProperties
url=OptionalProperties
uSNChanged=OptionalProperties
uSNCreated=OptionalProperties
uSNDSALastObjRemoved=OptionalProperties
USNIntersite=OptionalProperties
uSNLastObjRem=OptionalProperties
uSNSource=OptionalProperties
wbemPath=OptionalProperties
wellKnownObjects=OptionalProperties
whenChanged=OptionalProperties
whenCreated=OptionalProperties
wWWHomePage=OptionalProperties


_raw:
11/09/2025 09:06:18.027
dcName=LDAP://APT-DC-01.allports.local/
admonEventType=schema
className=msDS-ShadowPrincipal
classCN=ms-DS-Shadow-Principal
instanceType=MandatoryProperties
msDS-ShadowPrincipalSid=MandatoryProperties
nTSecurityDescriptor=MandatoryProperties
objectCategory=MandatoryProperties
objectClass=MandatoryProperties
instanceType=OptionalProperties
msDS-ShadowPrincipalSid=OptionalProperties
nTSecurityDescriptor=OptionalProperties
objectCategory=OptionalProperties
objectClass=OptionalProperties
adminDescription=OptionalProperties
adminDisplayName=OptionalProperties
allowedAttributes=OptionalProperties
allowedAttributesEffective=OptionalProperties
allowedChildClasses=OptionalProperties
allowedChildClassesEffective=OptionalProperties
bridgeheadServerListBL=OptionalProperties
canonicalName=OptionalProperties
cn=OptionalProperties
createTimeStamp=OptionalProperties
description=OptionalProperties
directReports=OptionalProperties
displayName=OptionalProperties
displayNamePrintable=OptionalProperties
distinguishedName=OptionalProperties
dSASignature=OptionalProperties
dSCorePropagationData=OptionalProperties
extensionName=OptionalProperties
flags=OptionalProperties
fromEntry=OptionalProperties
frsComputerReferenceBL=OptionalProperties
fRSMemberReferenceBL=OptionalProperties
fSMORoleOwner=OptionalProperties
isCriticalSystemObject=OptionalProperties
isDeleted=OptionalProperties
isPrivilegeHolder=OptionalProperties
isRecycled=OptionalProperties
lastKnownParent=OptionalProperties
managedObjects=OptionalProperties
masteredBy=OptionalProperties
member=OptionalProperties
memberOf=OptionalProperties
modifyTimeStamp=OptionalProperties
mS-DS-ConsistencyChildCount=OptionalProperties
mS-DS-ConsistencyGuid=OptionalProperties
msCOM-PartitionSetLink=OptionalProperties
msCOM-UserLink=OptionalProperties
msDFSR-ComputerReferenceBL=OptionalProperties
msDFSR-MemberReferenceBL=OptionalProperties
msDS-Approx-Immed-Subordinates=OptionalProperties
msDS-AuthenticatedToAccountlist=OptionalProperties
msDS-ClaimSharesPossibleValuesWithBL=OptionalProperties
msDS-CloudAnchor=OptionalProperties
msDS-EnabledFeatureBL=OptionalProperties
msDS-HostServiceAccountBL=OptionalProperties
msDS-IsDomainFor=OptionalProperties
msDS-IsFullReplicaFor=OptionalProperties
msDS-IsPartialReplicaFor=OptionalProperties
msDS-IsPrimaryComputerFor=OptionalProperties
msDS-KrbTgtLinkBl=OptionalProperties
msDS-LastKnownRDN=OptionalProperties
msDS-LocalEffectiveDeletionTime=OptionalProperties
msDS-LocalEffectiveRecycleTime=OptionalProperties
msDs-masteredBy=OptionalProperties
msds-memberOfTransitive=OptionalProperties
msDS-MembersForAzRoleBL=OptionalProperties
msDS-MembersOfResourcePropertyListBL=OptionalProperties
msds-memberTransitive=OptionalProperties
msDS-NC-RO-Replica-Locations-BL=OptionalProperties
msDS-NCReplCursors=OptionalProperties
msDS-NCReplInboundNeighbors=OptionalProperties
msDS-NCReplOutboundNeighbors=OptionalProperties
msDS-NcType=OptionalProperties
msDS-NonMembersBL=OptionalProperties
msDS-ObjectReferenceBL=OptionalProperties
msDS-ObjectSoa=OptionalProperties
msDS-OIDToGroupLinkBl=OptionalProperties
msDS-OperationsForAzRoleBL=OptionalProperties
msDS-OperationsForAzTaskBL=OptionalProperties
msDS-parentdistname=OptionalProperties
msDS-PrincipalName=OptionalProperties
msDS-PSOApplied=OptionalProperties
msDS-ReplAttributeMetaData=OptionalProperties
msDS-ReplValueMetaData=OptionalProperties
msDS-ReplValueMetaDataExt=OptionalProperties
msDS-RevealedDSAs=OptionalProperties
msDS-RevealedListBL=OptionalProperties
msDS-SourceAnchor=OptionalProperties
msDS-TasksForAzRoleBL=OptionalProperties
msDS-TasksForAzTaskBL=OptionalProperties
msDS-TDOEgressBL=OptionalProperties
msDS-TDOIngressBL=OptionalProperties
msDS-ValueTypeReferenceBL=OptionalProperties
msSFU30PosixMemberOf=OptionalProperties
name=OptionalProperties
netbootSCPBL=OptionalProperties
nonSecurityMemberBL=OptionalProperties
objectGUID=OptionalProperties
objectVersion=OptionalProperties
otherWellKnownObjects=OptionalProperties
ownerBL=OptionalProperties
partialAttributeDeletionList=OptionalProperties
partialAttributeSet=OptionalProperties
possibleInferiors=OptionalProperties
proxiedObjectName=OptionalProperties
proxyAddresses=OptionalProperties
queryPolicyBL=OptionalProperties
replPropertyMetaData=OptionalProperties
replUpToDateVector=OptionalProperties
repsFrom=OptionalProperties
repsTo=OptionalProperties
revision=OptionalProperties
sDRightsEffective=OptionalProperties
serverReferenceBL=OptionalProperties
showInAdvancedViewOnly=OptionalProperties
siteObjectBL=OptionalProperties
structuralObjectClass=OptionalProperties
subRefs=OptionalProperties
subSchemaSubEntry=OptionalProperties
systemFlags=OptionalProperties
url=OptionalProperties
uSNChanged=OptionalProperties
uSNCreated=OptionalProperties
uSNDSALastObjRemoved=OptionalProperties
USNIntersite=OptionalProperties
uSNLastObjRem=OptionalProperties
uSNSource=OptionalProperties
wbemPath=OptionalProperties
wellKnownObjects=OptionalProperties
whenChanged=OptionalProperties
whenCreated=OptionalProperties
wWWHomePage=OptionalProperties


_raw:
11/09/2025 09:06:18.011
dcName=LDAP://APT-DC-01.allports.local/
admonEventType=schema
className=msDS-ShadowPrincipalContainer
classCN=ms-DS-Shadow-Principal-Container
cn=MandatoryProperties
instanceType=MandatoryProperties
nTSecurityDescriptor=MandatoryProperties
objectCategory=MandatoryProperties
objectClass=MandatoryProperties
cn=OptionalProperties
instanceType=OptionalProperties
nTSecurityDescriptor=OptionalProperties
objectCategory=OptionalProperties
objectClass=OptionalProperties
adminDescription=OptionalProperties
adminDisplayName=OptionalProperties
allowedAttributes=OptionalProperties
allowedAttributesEffective=OptionalProperties
allowedChildClasses=OptionalProperties
allowedChildClassesEffective=OptionalProperties
bridgeheadServerListBL=OptionalProperties
canonicalName=OptionalProperties
createTimeStamp=OptionalProperties
defaultClassStore=OptionalProperties
description=OptionalProperties
directReports=OptionalProperties
displayName=OptionalProperties
displayNamePrintable=OptionalProperties
distinguishedName=OptionalProperties
dSASignature=OptionalProperties
dSCorePropagationData=OptionalProperties
extensionName=OptionalProperties
flags=OptionalProperties
fromEntry=OptionalProperties
frsComputerReferenceBL=OptionalProperties
fRSMemberReferenceBL=OptionalProperties
fSMORoleOwner=OptionalProperties
isCriticalSystemObject=OptionalProperties
isDeleted=OptionalProperties
isPrivilegeHolder=OptionalProperties
isRecycled=OptionalProperties
lastKnownParent=OptionalProperties
managedObjects=OptionalProperties
masteredBy=OptionalProperties
memberOf=OptionalProperties
modifyTimeStamp=OptionalProperties
mS-DS-ConsistencyChildCount=OptionalProperties
mS-DS-ConsistencyGuid=OptionalProperties
msCOM-PartitionSetLink=OptionalProperties
msCOM-UserLink=OptionalProperties
msDFSR-ComputerReferenceBL=OptionalProperties
msDFSR-MemberReferenceBL=OptionalProperties
msDS-Approx-Immed-Subordinates=OptionalProperties
msDS-AuthenticatedToAccountlist=OptionalProperties
msDS-ClaimSharesPossibleValuesWithBL=OptionalProperties
msDS-CloudAnchor=OptionalProperties
msDS-EnabledFeatureBL=OptionalProperties
msDS-HostServiceAccountBL=OptionalProperties
msDS-IsDomainFor=OptionalProperties
msDS-IsFullReplicaFor=OptionalProperties
msDS-IsPartialReplicaFor=OptionalProperties
msDS-IsPrimaryComputerFor=OptionalProperties
msDS-KrbTgtLinkBl=OptionalProperties
msDS-LastKnownRDN=OptionalProperties
msDS-LocalEffectiveDeletionTime=OptionalProperties
msDS-LocalEffectiveRecycleTime=OptionalProperties
msDs-masteredBy=OptionalProperties
msds-memberOfTransitive=OptionalProperties
msDS-MembersForAzRoleBL=OptionalProperties
msDS-MembersOfResourcePropertyListBL=OptionalProperties
msds-memberTransitive=OptionalProperties
msDS-NC-RO-Replica-Locations-BL=OptionalProperties
msDS-NCReplCursors=OptionalProperties
msDS-NCReplInboundNeighbors=OptionalProperties
msDS-NCReplOutboundNeighbors=OptionalProperties
msDS-NcType=OptionalProperties
msDS-NonMembersBL=OptionalProperties
msDS-ObjectReference=OptionalProperties
msDS-ObjectReferenceBL=OptionalProperties
msDS-ObjectSoa=OptionalProperties
msDS-OIDToGroupLinkBl=OptionalProperties
msDS-OperationsForAzRoleBL=OptionalProperties
msDS-OperationsForAzTaskBL=OptionalProperties
msDS-parentdistname=OptionalProperties
msDS-PrincipalName=OptionalProperties
msDS-PSOApplied=OptionalProperties
msDS-ReplAttributeMetaData=OptionalProperties
msDS-ReplValueMetaData=OptionalProperties
msDS-ReplValueMetaDataExt=OptionalProperties
msDS-RevealedDSAs=OptionalProperties
msDS-RevealedListBL=OptionalProperties
msDS-SourceAnchor=OptionalProperties
msDS-TasksForAzRoleBL=OptionalProperties
msDS-TasksForAzTaskBL=OptionalProperties
msDS-TDOEgressBL=OptionalProperties
msDS-TDOIngressBL=OptionalProperties
msDS-ValueTypeReferenceBL=OptionalProperties
msSFU30PosixMemberOf=OptionalProperties
name=OptionalProperties
netbootSCPBL=OptionalProperties
nonSecurityMemberBL=OptionalProperties
objectGUID=OptionalProperties
objectVersion=OptionalProperties
otherWellKnownObjects=OptionalProperties
ownerBL=OptionalProperties
partialAttributeDeletionList=OptionalProperties
partialAttributeSet=OptionalProperties
possibleInferiors=OptionalProperties
proxiedObjectName=OptionalProperties
proxyAddresses=OptionalProperties
queryPolicyBL=OptionalProperties
replPropertyMetaData=OptionalProperties
replUpToDateVector=OptionalProperties
repsFrom=OptionalProperties
repsTo=OptionalProperties
revision=OptionalProperties
schemaVersion=OptionalProperties
sDRightsEffective=OptionalProperties
serverReferenceBL=OptionalProperties
showInAdvancedViewOnly=OptionalProperties
siteObjectBL=OptionalProperties
structuralObjectClass=OptionalProperties
subRefs=OptionalProperties
subSchemaSubEntry=OptionalProperties
systemFlags=OptionalProperties
url=OptionalProperties
uSNChanged=OptionalProperties
uSNCreated=OptionalProperties
uSNDSALastObjRemoved=OptionalProperties
USNIntersite=OptionalProperties
uSNLastObjRem=OptionalProperties
uSNSource=OptionalProperties
wbemPath=OptionalProperties
wellKnownObjects=OptionalProperties
whenChanged=OptionalProperties
whenCreated=OptionalProperties
wWWHomePage=OptionalProperties