daily pastebin goal
69%
SHARE
TWEET

Untitled

a guest Jan 23rd, 2018 47 Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. Subject:
  2.             Security ID:            S-1-5-18
  3.             Account Name:           *********
  4.             Account Domain:         *********
  5.             Logon ID:               0x3E7
  6.  
  7.            Logon Type:                      2
  8.  
  9.            Account For Which Logon Failed:
  10.             Security ID:            S-1-0-0
  11.             Account Name:           *********
  12.             Account Domain:         EWNZ
  13.  
  14.            Failure Information:
  15.             Failure Reason:         Account locked out.
  16.             Status:                 0xC0000234
  17.             Sub Status:             0x0
  18.  
  19.            Process Information:
  20.             Caller Process ID:      0x9c8
  21.             Caller Process Name:    C:WindowsSystem32svchost.exe
  22.  
  23.            Network Information:
  24.             Workstation Name:       *********
  25.             Source Network Address: 127.0.0.1
  26.             Source Port:            0
  27.  
  28.            Detailed Authentication Information:
  29.             Logon Process:          User32
  30.             Authentication Package: Negotiate
  31.             Transited Services:     -
  32.             Package Name (NTLM only):       -
  33.             Key Length:             0
  34.  
  35.            This event is generated when a logon request fails. It is generated on the computer where access was
  36.            attempted.
  37.  
  38.            The Subject fields indicate the account on the local system which requested the logon. This is most
  39.            commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.
  40.  
  41.            The Logon Type field indicates the kind of logon that was requested. The most common types are 2
  42.            (interactive) and 3 (network).
  43.  
  44.            The Process Information fields indicate which account and process on the system requested the logon.
  45.  
  46.            The Network Information fields indicate where a remote logon request originated. Workstation name is
  47.            not always available and may be left blank in some cases.
  48.  
  49.            The authentication information fields provide detailed information about this specific logon request.
  50.             - Transited services indicate which intermediate services have participated in this logon request.
  51.             - Package name indicates which sub-protocol was used among the NTLM protocols.
  52.             - Key length indicates the length of the generated session key. This will be 0 if no session key was
  53.            requested.
  54.    
  55. Subject:
  56.             Security ID:            S-1-5-18
  57.             Account Name:           *********
  58.             Account Domain:         *********
  59.             Logon ID:               0x3E7
  60.  
  61.            Logon Type:                      2
  62.  
  63.            Account For Which Logon Failed:
  64.             Security ID:            S-1-0-0
  65.             Account Name:           *********
  66.             Account Domain:         *********
  67.  
  68.            Failure Information:
  69.             Failure Reason:         Account locked out.
  70.             Status:                 0xC0000234
  71.             Sub Status:             0x0
  72.  
  73.            Process Information:
  74.             Caller Process ID:      0x9c8
  75.             Caller Process Name:    C:WindowsSystem32svchost.exe
  76.  
  77.            Network Information:
  78.             Workstation Name:       *********
  79.             Source Network Address: 127.0.0.1
  80.             Source Port:            0
  81.  
  82.            Detailed Authentication Information:
  83.             Logon Process:          User32
  84.             Authentication Package: Negotiate
  85.             Transited Services:     -
  86.             Package Name (NTLM only):       -
  87.             Key Length:             0
  88.  
  89.            This event is generated when a logon request fails. It is generated on the computer where access was
  90.            attempted.
  91.  
  92.            The Subject fields indicate the account on the local system which requested the logon. This is most
  93.            commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.
  94.  
  95.            The Logon Type field indicates the kind of logon that was requested. The most common types are 2
  96.            (interactive) and 3 (network).
  97.  
  98.            The Process Information fields indicate which account and process on the system requested the logon.
  99.  
  100.            The Network Information fields indicate where a remote logon request originated. Workstation name is
  101.            not always available and may be left blank in some cases.
  102.  
  103.            The authentication information fields provide detailed information about this specific logon request.
  104.             - Transited services indicate which intermediate services have participated in this logon request.
  105.             - Package name indicates which sub-protocol was used among the NTLM protocols.
  106.             - Key length indicates the length of the generated session key. This will be 0 if no session key was
  107.            requested.
RAW Paste Data
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy. OK, I Understand
 
Top