_sourcetype: XmlWinEventLog

source: XmlWinEventLog:Directory Service

sourcetype: XmlWinEventLog


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-11-09T13:54:06.8630500Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='604' ThreadID='4796'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-11-05T17:07:32.8149751Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='624' ThreadID='2916'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-11-05T17:06:33.8023071Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='620' ThreadID='1344'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-11-05T17:06:18.2568250Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='624' ThreadID='4996'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-11-05T17:06:07.5244778Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='636' ThreadID='4080'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-11-05T17:05:15.9298159Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='612' ThreadID='1312'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-11-05T17:04:09.9516771Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='628' ThreadID='1292'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-11-05T17:03:42.1622594Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='628' ThreadID='3476'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-11-05T17:03:30.6464395Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='624' ThreadID='2740'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-11-05T17:02:54.6933996Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='604' ThreadID='1044'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-11-05T17:01:35.4011822Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='604' ThreadID='1272'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-11-05T14:24:47.5379050Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='624' ThreadID='5076'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-11-05T14:20:58.4868940Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='628' ThreadID='172'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-11-05T14:19:01.3471513Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='624' ThreadID='3968'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-11-05T14:18:07.7109025Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='616' ThreadID='4076'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-11-05T14:17:50.5711428Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='608' ThreadID='2704'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-11-05T14:17:13.6726932Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='628' ThreadID='1792'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-11-05T14:16:35.0382662Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='624' ThreadID='736'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-11-05T14:16:14.4401132Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='624' ThreadID='2436'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-11-05T14:15:17.7985936Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='624' ThreadID='3256'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-11-05T14:15:06.4695056Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='628' ThreadID='4936'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-29T21:24:32.2431251Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='612' ThreadID='2864'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-29T17:54:56.8094191Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='612' ThreadID='2992'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-29T17:54:03.7230881Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='616' ThreadID='5056'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-29T17:53:25.5600864Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='624' ThreadID='1676'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-29T17:51:37.6132312Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='632' ThreadID='676'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-29T17:51:19.9222406Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='628' ThreadID='3580'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-29T17:50:25.4078126Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='608' ThreadID='1684'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-29T17:48:42.0534773Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='616' ThreadID='3788'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-29T17:48:38.7717810Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='632' ThreadID='1632'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-29T17:48:05.0240047Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='620' ThreadID='1188'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-28T21:17:31.9681492Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='628' ThreadID='760'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-28T21:16:25.0578059Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='628' ThreadID='3368'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-28T21:16:11.4646395Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='624' ThreadID='1460'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-28T21:15:44.8150253Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='620' ThreadID='4480'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-28T21:13:57.4834038Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='616' ThreadID='3208'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-28T21:13:12.1570029Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='612' ThreadID='1732'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-28T21:12:56.6623804Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='628' ThreadID='1932'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-28T21:11:46.4088390Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='616' ThreadID='3000'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-28T21:11:09.0928762Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='624' ThreadID='1012'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-28T21:10:00.1811054Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='628' ThreadID='4396'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-28T19:48:37.4386945Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='620' ThreadID='5088'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-21T04:25:51.5027126Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='612' ThreadID='3716'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-21T04:24:02.1595162Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='632' ThreadID='1580'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-21T04:23:41.4019830Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='620' ThreadID='4996'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-21T04:22:31.1404849Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='608' ThreadID='4928'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-21T04:21:39.9458177Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='620' ThreadID='4852'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-21T04:21:09.8938742Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='624' ThreadID='3488'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-21T04:20:11.8012702Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='624' ThreadID='3608'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-21T04:19:48.5724915Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='616' ThreadID='2552'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-21T04:19:20.5082390Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='624' ThreadID='4236'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-21T04:18:50.1151779Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='624' ThreadID='408'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-21T04:18:19.6609730Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='624' ThreadID='2388'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-21T03:00:53.3653226Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='624' ThreadID='4360'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-21T02:11:56.7502934Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='628' ThreadID='1676'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-21T01:31:01.0156735Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='624' ThreadID='4956'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-21T00:49:19.4208603Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='620' ThreadID='5076'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-20T23:55:37.8281664Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='632' ThreadID='2676'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-20T23:09:11.7158538Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='636' ThreadID='3792'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-20T19:30:24.0836541Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='616' ThreadID='4932'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-20T18:16:05.8262180Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='632' ThreadID='1512'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-16T02:08:52.2842183Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='624' ThreadID='3100'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-15T12:50:29.4297935Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='632' ThreadID='5072'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-15T12:49:48.0014496Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='632' ThreadID='1984'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-15T12:49:03.8820408Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='628' ThreadID='4964'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-15T12:47:41.1829490Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='624' ThreadID='5032'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-15T12:47:27.1934502Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='628' ThreadID='4968'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-15T12:46:56.4881463Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='632' ThreadID='3912'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-15T12:45:20.8754925Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='608' ThreadID='4396'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-15T12:44:58.1501410Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='632' ThreadID='4120'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-15T12:44:10.6834549Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='616' ThreadID='176'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-15T12:44:06.7420005Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='608' ThreadID='2620'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-15T11:17:46.0714047Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='620' ThreadID='4256'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-15T11:12:44.8588614Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='608' ThreadID='3036'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-15T11:12:13.2003788Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='624' ThreadID='2180'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-15T11:12:07.8182608Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='628' ThreadID='3832'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-15T11:11:48.3579530Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='624' ThreadID='4492'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-15T11:10:47.0112616Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='616' ThreadID='3516'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-15T11:08:30.5224569Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='628' ThreadID='3412'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-15T11:07:40.9316982Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='612' ThreadID='4376'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-15T11:07:35.1931250Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='624' ThreadID='4188'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>


_raw: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-ActiveDirectory_DomainService' Guid='{0e8478c5-3605-4e8c-8497-1e730c959516}' EventSourceName='NTDS General'/><EventID Qualifiers='16384'>2013</EventID><Version>0</Version><Level>4</Level><Task>9</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2025-10-15T11:06:08.8270406Z'/><EventRecordID>26</EventRecordID><Correlation/><Execution ProcessID='620' ThreadID='4540'/><Channel>Directory Service</Channel><Computer>APT-DC-01</Computer><Security UserID='S-1-5-7'/></System><EventData><Data>5</Data><Data>PDNT_index +PDNT_col LCL_ABVIEW_index00000409 +ATTb590468 INDEX_000201CC +ATTm131532 INDEX_00090001 +ATTm589825 INDEX_00000003 +ATTm3 </Data></EventData></Event>