"type": "Authentication", "Authentication": { "version": { "major": 1, "minor": 2 }, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_WRONG_PASSWORD", "localAddress": "ipv4:192.168.1.227:445", "remoteAddress": "ipv4:192.168.1.108:61341", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "DESKTOP-F9S3P6E", "clientAccount": "benjamin", "workstation": "DESKTOP-F9S3P6E", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "benjamin", "mappedDomain": "DESKTOP-F9S3P6E", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv1", "duration": 2504 }, "timestamp_tval": { "tv_sec": 1677486054, "tv_usec": 225662 } }, { "timestamp": "2023-02-27T21:20:58.888990+1300", "type": "Authentication", "Authentication": { "version": { "major": 1, "minor": 2 }, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_WRONG_PASSWORD", "localAddress": "ipv4:192.168.1.107:445", "remoteAddress": "ipv4:192.168.1.108:61343", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "DESKTOP-F9S3P6E", "clientAccount": "benjamin", "workstation": "DESKTOP-F9S3P6E", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "benjamin", "mappedDomain": "DESKTOP-F9S3P6E", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv1", "duration": 2488 }, "timestamp_tval": { "tv_sec": 1677486058, "tv_usec": 888990 } }, { "timestamp": "2023-02-27T21:20:59.159031+1300", "type": "Authentication", "Authentication": { "version": { "major": 1, "minor": 2 }, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_WRONG_PASSWORD", "localAddress": "ipv4:192.168.1.107:445", "remoteAddress": "ipv4:192.168.1.108:61344", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "DESKTOP-F9S3P6E", "clientAccount": "benjamin", "workstation": "DESKTOP-F9S3P6E", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "benjamin", "mappedDomain": "DESKTOP-F9S3P6E", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv1", "duration": 3154 }, "timestamp_tval": { "tv_sec": 1677486059, "tv_usec": 159031 } }, { "timestamp": "2023-02-27T21:20:59.173609+1300", "type": "Authentication", "Authentication": { "version": { "major": 1, "minor": 2 }, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_WRONG_PASSWORD", "localAddress": "ipv4:192.168.1.107:445", "remoteAddress": "ipv4:192.168.1.108:61346", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "DESKTOP-F9S3P6E", "clientAccount": "benjamin", "workstation": "DESKTOP-F9S3P6E", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "benjamin", "mappedDomain": "DESKTOP-F9S3P6E", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv1", "duration": 2525 }, "timestamp_tval": { "tv_sec": 1677486059, "tv_usec": 173609 } }, { "timestamp": "2023-02-27T21:20:59.189053+1300", "type": "Authentication", "Authentication": { "version": { "major": 1, "minor": 2 }, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_WRONG_PASSWORD", "localAddress": "ipv4:192.168.1.107:445", "remoteAddress": "ipv4:192.168.1.108:61347", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "DESKTOP-F9S3P6E", "clientAccount": "benjamin", "workstation": "DESKTOP-F9S3P6E", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "benjamin", "mappedDomain": "DESKTOP-F9S3P6E", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv1", "duration": 2602 }, "timestamp_tval": { "tv_sec": 1677486059, "tv_usec": 189053 } }, { "timestamp": "2023-02-27T21:20:59.203769+1300", "type": "Authentication", "Authentication": { "version": { "major": 1, "minor": 2 }, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_WRONG_PASSWORD", "localAddress": "ipv4:192.168.1.107:445", "remoteAddress": "ipv4:192.168.1.108:61348", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "DESKTOP-F9S3P6E", "clientAccount": "benjamin", "workstation": "DESKTOP-F9S3P6E", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "benjamin", "mappedDomain": "DESKTOP-F9S3P6E", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv1", "duration": 2433 }, "timestamp_tval": { "tv_sec": 1677486059, "tv_usec": 203769 } }, { "timestamp": "2023-02-27T21:20:59.218550+1300", "type": "Authentication", "Authentication": { "version": { "major": 1, "minor": 2 }, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_WRONG_PASSWORD", "localAddress": "ipv4:192.168.1.107:445", "remoteAddress": "ipv4:192.168.1.108:61349", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "DESKTOP-F9S3P6E", "clientAccount": "benjamin", "workstation": "DESKTOP-F9S3P6E", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "benjamin", "mappedDomain": "DESKTOP-F9S3P6E", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv1", "duration": 3007 }, "timestamp_tval": { "tv_sec": 1677486059, "tv_usec": 218550 } }, { "timestamp": "2023-02-27T21:20:59.232563+1300", "type": "Authentication", "Authentication": { "version": { "major": 1, "minor": 2 }, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_WRONG_PASSWORD", "localAddress": "ipv4:192.168.1.107:445", "remoteAddress": "ipv4:192.168.1.108:61350", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "DESKTOP-F9S3P6E", "clientAccount": "benjamin", "workstation": "DESKTOP-F9S3P6E", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "benjamin", "mappedDomain": "DESKTOP-F9S3P6E", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv1", "duration": 2483 }, "timestamp_tval": { "tv_sec": 1677486059, "tv_usec": 232563 } }, { "timestamp": "2023-02-27T21:20:59.247485+1300", "type": "Authentication", "Authentication": { "version": { "major": 1, "minor": 2 }, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_WRONG_PASSWORD", "localAddress": "ipv4:192.168.1.107:445", "remoteAddress": "ipv4:192.168.1.108:61351", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "DESKTOP-F9S3P6E", "clientAccount": "benjamin", "workstation": "DESKTOP-F9S3P6E", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "benjamin", "mappedDomain": "DESKTOP-F9S3P6E", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv1", "duration": 2542 }, "timestamp_tval": { "tv_sec": 1677486059, "tv_usec": 247485 } }, { "timestamp": "2023-02-27T21:20:59.264144+1300", "type": "Authentication", "Authentication": { "version": { "major": 1, "minor": 2 }, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_WRONG_PASSWORD", "localAddress": "ipv4:192.168.1.107:445", "remoteAddress": "ipv4:192.168.1.108:61352", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "DESKTOP-F9S3P6E", "clientAccount": "benjamin", "workstation": "DESKTOP-F9S3P6E", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "benjamin", "mappedDomain": "DESKTOP-F9S3P6E", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv1", "duration": 2595 }, "timestamp_tval": { "tv_sec": 1677486059, "tv_usec": 264144 } }, { "timestamp": "2023-02-27T21:20:59.280137+1300", "type": "Authentication", "Authentication": { "version": { "major": 1, "minor": 2 }, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_WRONG_PASSWORD", "localAddress": "ipv4:192.168.1.107:445", "remoteAddress": "ipv4:192.168.1.108:61353", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "DESKTOP-F9S3P6E", "clientAccount": "benjamin", "workstation": "DESKTOP-F9S3P6E", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "benjamin", "mappedDomain": "DESKTOP-F9S3P6E", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv1", "duration": 2626 }, "timestamp_tval": { "tv_sec": 1677486059, "tv_usec": 280137 } }, { "timestamp": "2023-02-27T21:20:59.295686+1300", "type": "Authentication", "Authentication": { "version": { "major": 1, "minor": 2 }, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_WRONG_PASSWORD", "localAddress": "ipv4:192.168.1.107:445", "remoteAddress": "ipv4:192.168.1.108:61354", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "DESKTOP-F9S3P6E", "clientAccount": "benjamin", "workstation": "DESKTOP-F9S3P6E", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "benjamin", "mappedDomain": "DESKTOP-F9S3P6E", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv1", "duration": 2574 }, "timestamp_tval": { "tv_sec": 1677486059, "tv_usec": 295686 } }, { "timestamp": "2023-02-27T21:21:05.165740+1300", "type": "Authentication", "Authentication": { "version": { "major": 1, "minor": 2 }, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_WRONG_PASSWORD", "localAddress": "ipv4:192.168.1.107:445", "remoteAddress": "ipv4:192.168.1.108:61357", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "DESKTOP-F9S3P6E", "clientAccount": "benjamin", "workstation": "DESKTOP-F9S3P6E", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "benjamin", "mappedDomain": "DESKTOP-F9S3P6E", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv1", "duration": 2499 }, "timestamp_tval": { "tv_sec": 1677486065, "tv_usec": 165740 } }, { "timestamp": "2023-02-27T21:21:05.180698+1300", "type": "Authentication", "Authentication": { "version": { "major": 1, "minor": 2 }, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_WRONG_PASSWORD", "localAddress": "ipv4:192.168.1.107:445", "remoteAddress": "ipv4:192.168.1.108:61358", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "DESKTOP-F9S3P6E", "clientAccount": "benjamin", "workstation": "DESKTOP-F9S3P6E", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "benjamin", "mappedDomain": "DESKTOP-F9S3P6E", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv1", "duration": 2585 }, "timestamp_tval": { "tv_sec": 1677486065, "tv_usec": 180698 } }, { "timestamp": "2023-02-27T21:22:24.623958+1300", "type": "Authentication", "Authentication": { "version": { "major": 1, "minor": 2 }, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_WRONG_PASSWORD", "localAddress": "ipv4:192.168.1.107:445", "remoteAddress": "ipv4:192.168.1.108:61433", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "DESKTOP-F9S3P6E", "clientAccount": "benjamin", "workstation": "DESKTOP-F9S3P6E", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "benjamin", "mappedDomain": "DESKTOP-F9S3P6E", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv1", "duration": 6375 }, "timestamp_tval": { "tv_sec": 1677486144, "tv_usec": 623958 } }, { "timestamp": "2023-02-27T21:22:25.320251+1300", "type": "Authentication", "Authentication": { "version": { "major": 1, "minor": 2 }, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_WRONG_PASSWORD", "localAddress": "ipv4:192.168.1.107:445", "remoteAddress": "ipv4:192.168.1.108:61435", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "DESKTOP-F9S3P6E", "clientAccount": "benjamin", "workstation": "DESKTOP-F9S3P6E", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "benjamin", "mappedDomain": "DESKTOP-F9S3P6E", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv1", "duration": 3170 }, "timestamp_tval": { "tv_sec": 1677486145, "tv_usec": 320251 } }, { "timestamp": "2023-02-27T21:22:25.338300+1300", "type": "Authentication", "Authentication": { "version": { "major": 1, "minor": 2 }, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_WRONG_PASSWORD", "localAddress": "ipv4:192.168.1.107:445", "remoteAddress": "ipv4:192.168.1.108:61436", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "DESKTOP-F9S3P6E", "clientAccount": "benjamin", "workstation": "DESKTOP-F9S3P6E", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "benjamin", "mappedDomain": "DESKTOP-F9S3P6E", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv1", "duration": 3393 }, "timestamp_tval": { "tv_sec": 1677486145, "tv_usec": 338300 } }, { "timestamp": "2023-02-27T21:22:25.819222+1300", "type": "Authentication", "Authentication": { "version": { "major": 1, "minor": 2 }, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_WRONG_PASSWORD", "localAddress": "ipv4:192.168.1.107:445", "remoteAddress": "ipv4:192.168.1.108:61437", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "DESKTOP-F9S3P6E", "clientAccount": "benjamin", "workstation": "DESKTOP-F9S3P6E", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "benjamin", "mappedDomain": "DESKTOP-F9S3P6E", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv1", "duration": 3192 }, "timestamp_tval": { "tv_sec": 1677486145, "tv_usec": 819222 } }, { "timestamp": "2023-02-27T21:22:25.837756+1300", "type": "Authentication", "Authentication": { "version": { "major": 1, "minor": 2 }, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_WRONG_PASSWORD", "localAddress": "ipv4:192.168.1.107:445", "remoteAddress": "ipv4:192.168.1.108:61438", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "DESKTOP-F9S3P6E", "clientAccount": "benjamin", "workstation": "DESKTOP-F9S3P6E", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "benjamin", "mappedDomain": "DESKTOP-F9S3P6E", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv1", "duration": 3474 }, "timestamp_tval": { "tv_sec": 1677486145, "tv_usec": 837756 } }, { "timestamp": "2023-02-27T21:22:26.266598+1300", "type": "Authentication", "Authentication": { "version": { "major": 1, "minor": 2 }, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_WRONG_PASSWORD", "localAddress": "ipv4:192.168.1.107:445", "remoteAddress": "ipv4:192.168.1.108:61439", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "DESKTOP-F9S3P6E", "clientAccount": "benjamin", "workstation": "DESKTOP-F9S3P6E", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "benjamin", "mappedDomain": "DESKTOP-F9S3P6E", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv1", "duration": 2415 }, "timestamp_tval": { "tv_sec": 1677486146, "tv_usec": 266598 } }, { "timestamp": "2023-02-27T21:22:26.281681+1300", "type": "Authentication", "Authentication": { "version": { "major": 1, "minor": 2 }, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_WRONG_PASSWORD", "localAddress": "ipv4:192.168.1.107:445", "remoteAddress": "ipv4:192.168.1.108:61440", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "DESKTOP-F9S3P6E", "clientAccount": "benjamin", "workstation": "DESKTOP-F9S3P6E", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "benjamin", "mappedDomain": "DESKTOP-F9S3P6E", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv1", "duration": 2542 }, "timestamp_tval": { "tv_sec": 1677486146, "tv_usec": 281681 } }, { "timestamp": "2023-02-27T21:22:28.998109+1300", "type": "Authentication", "Authentication": { "version": { "major": 1, "minor": 2 }, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_WRONG_PASSWORD", "localAddress": "ipv4:192.168.1.107:445", "remoteAddress": "ipv4:192.168.1.108:61442", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "DESKTOP-F9S3P6E", "clientAccount": "benjamin", "workstation": "DESKTOP-F9S3P6E", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "benjamin", "mappedDomain": "DESKTOP-F9S3P6E", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv1", "duration": 3070 }, "timestamp_tval": { "tv_sec": 1677486148, "tv_usec": 998109 } }, { "timestamp": "2023-02-27T21:22:29.015125+1300", "type": "Authentication", "Authentication": { "version": { "major": 1, "minor": 2 }, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_WRONG_PASSWORD", "localAddress": "ipv4:192.168.1.107:445", "remoteAddress": "ipv4:192.168.1.108:61443", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "DESKTOP-F9S3P6E", "clientAccount": "benjamin", "workstation": "DESKTOP-F9S3P6E", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "benjamin", "mappedDomain": "DESKTOP-F9S3P6E", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv1", "duration": 3208 }, "timestamp_tval": { "tv_sec": 1677486149, "tv_usec": 15125 } }, { "timestamp": "2023-02-27T21:22:29.902449+1300", "type": "Authentication", "Authentication": { "version": { "major": 1, "minor": 2 }, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_WRONG_PASSWORD", "localAddress": "ipv4:192.168.1.107:445", "remoteAddress": "ipv4:192.168.1.108:61444", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "DESKTOP-F9S3P6E", "clientAccount": "benjamin", "workstation": "DESKTOP-F9S3P6E", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "benjamin", "mappedDomain": "DESKTOP-F9S3P6E", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv1", "duration": 2560 }, "timestamp_tval": { "tv_sec": 1677486149, "tv_usec": 902449 } }, { "timestamp": "2023-02-27T21:22:29.917892+1300", "type": "Authentication", "Authentication": { "version": { "major": 1, "minor": 2 }, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_WRONG_PASSWORD", "localAddress": "ipv4:192.168.1.107:445", "remoteAddress": "ipv4:192.168.1.108:61445", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "DESKTOP-F9S3P6E", "clientAccount": "benjamin", "workstation": "DESKTOP-F9S3P6E", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "benjamin", "mappedDomain": "DESKTOP-F9S3P6E", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv1", "duration": 2661 }, "timestamp_tval": { "tv_sec": 1677486149, "tv_usec": 917892 } }, { "timestamp": "2023-02-27T21:22:30.699997+1300", "type": "Authentication", "Authentication": { "version": { "major": 1, "minor": 2 }, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_WRONG_PASSWORD", "localAddress": "ipv4:192.168.1.107:445", "remoteAddress": "ipv4:192.168.1.108:61446", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "DESKTOP-F9S3P6E", "clientAccount": "benjamin", "workstation": "DESKTOP-F9S3P6E", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "benjamin", "mappedDomain": "DESKTOP-F9S3P6E", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv1", "duration": 2505 }, "timestamp_tval": { "tv_sec": 1677486150, "tv_usec": 699997 } }, { "timestamp": "2023-02-27T21:22:30.716630+1300", "type": "Authentication", "Authentication": { "version": { "major": 1, "minor": 2 }, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_WRONG_PASSWORD", "localAddress": "ipv4:192.168.1.107:445", "remoteAddress": "ipv4:192.168.1.108:61447", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "DESKTOP-F9S3P6E", "clientAccount": "benjamin", "workstation": "DESKTOP-F9S3P6E", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "benjamin", "mappedDomain": "DESKTOP-F9S3P6E", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv1", "duration": 2630 },