"_time",count,EventCode,Keywords,"Logon_Process","Logon_Type","Logon_Type_Description",RecordNumber,Type,dest,user "1476350265.000",,4624,"Audit Success",Advapi,2,Interactive,2541080,Information,"host_25","user_55" "1476350265.000",,4624,"Audit Success",Advapi,2,Interactive,2541078,Information,"host_25","user_55" "1476390173.000",,4624,"Audit Success",User32,10,RemoteInteractive,1521954,Information,"host_1","user_106" "1476390820.000",,4624,"Audit Success",Advapi,2,Interactive,893584099,Information,"host_11","user_4" "1476390836.000",,4624,"Audit Success",User32,10,RemoteInteractive,893585433,Information,"host_11","user_91" "1476391699.000",,4624,"Audit Success",User32,10,RemoteInteractive,1521971,Information,"host_1","user_53" "1476393383.000",,4624,"Audit Success",Advapi,2,Interactive,2543844,Information,"host_25","user_135" "1476393383.000",,4624,"Audit Success",Advapi,2,Interactive,2543842,Information,"host_25","user_135" "1476397921.000",,4624,"Audit Success",User32,10,RemoteInteractive,1522038,Information,"host_1","user_51" "1476423851.000",,4624,"Audit Success",Advapi,2,Interactive,2544942,Information,"host_25","user_102" "1476423851.000",,4624,"Audit Success",Advapi,2,Interactive,2544940,Information,"host_25","user_102" "1476431960.000",,4624,"Audit Success",Advapi,2,Interactive,148704959,Information,"host_3","user_2" "1476434853.000",,4624,"Audit Success",Advapi,2,Interactive,2634571606,Information,"host_5","user_3" "1476438226.000",,4624,"Audit Success",Advapi,2,Interactive,2635143804,Information,"host_5","user_3" "1476439722.000",,4624,"Audit Success",Advapi,2,Interactive,897921975,Information,"host_11","user_2" "1476446462.000",,4624,"Audit Success",User32,10,RemoteInteractive,1522245,Information,"host_1","svc_system_monitoring" "1476451356.000",,4624,"Audit Success",User32,10,RemoteInteractive,1522270,Information,"host_1","user_133" "1476451712.000",,4624,"Audit Success",User32,10,RemoteInteractive,1522275,Information,"host_1","user_39" "1476456924.000",,4624,"Audit Success",User32,10,RemoteInteractive,1352389600,Information,"host_14","user_91" "1476463682.000",,4624,"Audit Success",User32,10,RemoteInteractive,1522335,Information,"host_1","user_52" "1476464776.000",,4624,"Audit Success",Advapi,2,Interactive,2547083,Information,"host_25","user_14" "1476464777.000",,4624,"Audit Success",Advapi,2,Interactive,2547085,Information,"host_25","user_14" "1476464897.000",,4624,"Audit Success",Advapi,2,Interactive,2547104,Information,"host_25","user_15" "1476464897.000",,4624,"Audit Success",Advapi,2,Interactive,2547102,Information,"host_25","user_15" "1476473456.000",,4624,"Audit Success",User32,10,RemoteInteractive,1522401,Information,"host_1","user_63" "1476474158.000",,4624,"Audit Success",User32,10,RemoteInteractive,1522404,Information,"host_1","user_121" "1476475970.000",,4624,"Audit Success",Advapi,2,Interactive,2547932,Information,"host_25","user_76" "1476475971.000",,4624,"Audit Success",Advapi,2,Interactive,2547934,Information,"host_25","user_76" "1476476939.000",,4624,"Audit Success",User32,10,RemoteInteractive,1522430,Information,"host_1","user_51" "1476481346.000",,4624,"Audit Success",Advapi,2,Interactive,2548289,Information,"host_25","user_89" "1476481346.000",,4624,"Audit Success",Advapi,2,Interactive,2548287,Information,"host_25","user_89" "1476487003.000",,4624,"Audit Success",User32,10,RemoteInteractive,1522520,Information,"host_1","user_113" "1476510609.000",,4624,"Audit Success",Advapi,2,Interactive,2549008,Information,"host_25","user_83" "1476510609.000",,4624,"Audit Success",Advapi,2,Interactive,2549006,Information,"host_25","user_83" "1476552967.000",,4624,"Audit Success",Advapi,2,Interactive,2549492,Information,"host_25","user_25" "1476552968.000",,4624,"Audit Success",Advapi,2,Interactive,2549494,Information,"host_25","user_25" "1476553531.000",,4624,"Audit Success",Advapi,2,Interactive,2549509,Information,"host_25","user_130" "1476553531.000",,4624,"Audit Success",Advapi,2,Interactive,2549507,Information,"host_25","user_130" "1476556504.000",,4624,"Audit Success",Advapi,2,Interactive,2549534,Information,"host_25","user_37" "1476556505.000",,4624,"Audit Success",Advapi,2,Interactive,2549536,Information,"host_25","user_37" "1476564182.000",,4624,"Audit Success",Advapi,2,Interactive,2549636,Information,"host_25","user_103" "1476564183.000",,4624,"Audit Success",Advapi,2,Interactive,2549638,Information,"host_25","user_103" "1476564344.000",,4624,"Audit Success",Advapi,2,Interactive,2549642,Information,"host_25","user_23" "1476564345.000",,4624,"Audit Success",Advapi,2,Interactive,2549644,Information,"host_25","user_23" "1476582329.000",,4624,"Audit Success",Advapi,2,Interactive,2549874,Information,"host_25","user_29" "1476582329.000",,4624,"Audit Success",Advapi,2,Interactive,2549872,Information,"host_25","user_29" "1476637434.000",,4624,"Audit Success",Advapi,2,Interactive,2550467,Information,"host_25","user_101" "1476637434.000",,4624,"Audit Success",Advapi,2,Interactive,2550465,Information,"host_25","user_101" "1476642566.000",,4624,"Audit Success",Advapi,2,Interactive,2550560,Information,"host_25","user_59" "1476642566.000",,4624,"Audit Success",Advapi,2,Interactive,2550557,Information,"host_25","user_59" "1476644297.000",,4624,"Audit Success",Advapi,2,Interactive,2550591,Information,"host_25","user_69" "1476644297.000",,4624,"Audit Success",Advapi,2,Interactive,2550589,Information,"host_25","user_69" "1476644966.000",,4624,"Audit Success",Advapi,2,Interactive,2550602,Information,"host_25","user_50" "1476644967.000",,4624,"Audit Success",Advapi,2,Interactive,2550604,Information,"host_25","user_50" "1476663378.000",,4624,"Audit Success",Advapi,2,Interactive,911192142,Information,"host_11","user_3" "1476663380.000",,4624,"Audit Success",User32,10,RemoteInteractive,911192455,Information,"host_11","user_139" "1476665996.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523091,Information,"host_1","user_34" "1476666469.000",,4624,"Audit Success",Advapi,2,Interactive,2550991,Information,"host_25","user_46" "1476666470.000",,4624,"Audit Success",Advapi,2,Interactive,2550993,Information,"host_25","user_46" "1476666724.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523097,Information,"host_1","user_34" "1476667464.000",,4624,"Audit Success",Advapi,2,Interactive,2551028,Information,"host_25","user_87" "1476667465.000",,4624,"Audit Success",Advapi,2,Interactive,2551030,Information,"host_25","user_87" "1476672362.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523119,Information,"host_1","user_34" "1476674564.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523130,Information,"host_1","user_34" "1476680094.000",,4624,"Audit Success",Advapi,2,Interactive,2551353,Information,"host_25","user_118" "1476680094.000",,4624,"Audit Success",Advapi,2,Interactive,2551351,Information,"host_25","user_118" "1476680496.000",,4624,"Audit Success",Advapi,2,Interactive,2551372,Information,"host_25","user_132" "1476680497.000",,4624,"Audit Success",Advapi,2,Interactive,2551374,Information,"host_25","user_132" "1476700329.000",,4624,"Audit Success",Advapi,2,Interactive,2551983,Information,"host_25","user_73" "1476700330.000",,4624,"Audit Success",Advapi,2,Interactive,2551985,Information,"host_25","user_73" "1476702651.000",,4624,"Audit Success",Advapi,2,Interactive,2552055,Information,"host_25","user_93" "1476702651.000",,4624,"Audit Success",Advapi,2,Interactive,2552053,Information,"host_25","user_93" "1476704635.000",,4624,"Audit Success",Advapi,2,Interactive,2552110,Information,"host_25","user_108" "1476704635.000",,4624,"Audit Success",Advapi,2,Interactive,2552108,Information,"host_25","user_108" "1476704932.000",,4624,"Audit Success",Advapi,2,Interactive,2552123,Information,"host_25","user_75" "1476704933.000",,4624,"Audit Success",Advapi,2,Interactive,2552125,Information,"host_25","user_75" "1476708154.000",,4624,"Audit Success",Advapi,2,Interactive,2552308,Information,"host_25","user_64" "1476708154.000",,4624,"Audit Success",Advapi,2,Interactive,2552306,Information,"host_25","user_64" "1476709393.000",,4624,"Audit Success",Advapi,2,Interactive,2552408,Information,"host_25","user_79" "1476709393.000",,4624,"Audit Success",Advapi,2,Interactive,2552406,Information,"host_25","user_79" "1476712881.000",,4624,"Audit Success",Advapi,2,Interactive,2552662,Information,"host_25","user_136" "1476712881.000",,4624,"Audit Success",Advapi,2,Interactive,2552660,Information,"host_25","user_136" "1476713015.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523250,Information,"host_1","user_113" "1476714250.000",,4624,"Audit Success",Advapi,2,Interactive,2667253180,Information,"host_5","user_3" "1476714252.000",,4624,"Audit Success",User32,10,RemoteInteractive,2667253494,Information,"host_5","user_96" "1476714264.000",,4624,"Audit Success",Advapi,2,Interactive,2552791,Information,"host_25","user_77" "1476714265.000",,4624,"Audit Success",Advapi,2,Interactive,2552793,Information,"host_25","user_77" "1476714933.000",,4624,"Audit Success",Advapi,2,Interactive,2552851,Information,"host_25","user_43" "1476714933.000",,4624,"Audit Success",Advapi,2,Interactive,2552849,Information,"host_25","user_43" "1476715048.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523258,Information,"host_1","user_34" "1476715196.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523262,Information,"host_1","user_142" "1476715620.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523266,Information,"host_1","user_41" "1476717298.000",,4624,"Audit Success",Advapi,2,Interactive,2553051,Information,"host_25","user_21" "1476717298.000",,4624,"Audit Success",Advapi,2,Interactive,2553049,Information,"host_25","user_21" "1476717303.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523276,Information,"host_1","user_39" "1476717363.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523282,Information,"host_1","user_39" "1476717724.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523288,Information,"host_1","user_34" "1476717778.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523297,Information,"host_1","user_133" "1476717804.000",,4624,"Audit Success",Advapi,2,Interactive,2553117,Information,"host_25","user_45" "1476717804.000",,4624,"Audit Success",Advapi,2,Interactive,2553115,Information,"host_25","user_45" "1476719866.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523307,Information,"host_1","user_16" "1476720166.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523319,Information,"host_1","user_26" "1476720394.000",,4624,"Audit Success",Advapi,2,Interactive,2553438,Information,"host_25","user_129" "1476720395.000",,4624,"Audit Success",Advapi,2,Interactive,2553440,Information,"host_25","user_129" "1476721360.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523323,Information,"host_1","user_70" "1476721965.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523332,Information,"host_1","user_65" "1476722282.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523337,Information,"host_1","user_65" "1476722360.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523342,Information,"host_1","user_65" "1476722392.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523349,Information,"host_1","user_65" "1476722491.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523353,Information,"host_1","user_66" "1476722524.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523357,Information,"host_1","user_66" "1476723068.000",,4624,"Audit Success",Advapi,2,Interactive,2553764,Information,"host_25","user_131" "1476723069.000",,4624,"Audit Success",Advapi,2,Interactive,2553767,Information,"host_25","user_131" "1476723483.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523363,Information,"host_1","user_106" "1476724018.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523370,Information,"host_1","user_137" "1476724063.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523379,Information,"host_1","user_138" "1476724077.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523383,Information,"host_1","user_52" "1476724711.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523392,Information,"host_1","user_113" "1476724727.000",,4624,"Audit Success",Advapi,2,Interactive,2553955,Information,"host_25","user_90" "1476724727.000",,4624,"Audit Success",Advapi,2,Interactive,2553953,Information,"host_25","user_90" "1476724960.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523397,Information,"host_1","user_70" "1476724995.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523402,Information,"host_1","user_70" "1476725067.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523407,Information,"host_1","user_146" "1476725289.000",,4624,"Audit Success",Advapi,2,Interactive,2554015,Information,"host_25","user_35" "1476725289.000",,4624,"Audit Success",Advapi,2,Interactive,2554013,Information,"host_25","user_35" "1476725551.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523413,Information,"host_1","user_82" "1476725853.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523424,Information,"host_1","user_16" "1476726048.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523432,Information,"host_1","user_85" "1476726067.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523436,Information,"host_1","user_52" "1476726107.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523442,Information,"host_1","user_52" "1476726125.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523446,Information,"host_1","user_51" "1476726340.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523452,Information,"host_1","user_26" "1476726595.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523458,Information,"host_1","user_66" "1476727132.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523469,Information,"host_1","user_86" "1476727407.000",,4624,"Audit Success",Advapi,2,Interactive,2554216,Information,"host_25","user_36" "1476727407.000",,4624,"Audit Success",Advapi,2,Interactive,2554214,Information,"host_25","user_36" "1476727863.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523478,Information,"host_1","user_113" "1476727876.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523483,Information,"host_1","user_66" "1476728026.000",,4624,"Audit Success",Advapi,2,Interactive,2554285,Information,"host_25","user_28" "1476728026.000",,4624,"Audit Success",Advapi,2,Interactive,2554283,Information,"host_25","user_28" "1476729270.000",,4624,"Audit Success",Advapi,2,Interactive,2554382,Information,"host_25","user_92" "1476729271.000",,4624,"Audit Success",Advapi,2,Interactive,2554384,Information,"host_25","user_92" "1476729906.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523502,Information,"host_1","user_138" "1476730694.000",,4624,"Audit Success",Advapi,2,Interactive,2554486,Information,"host_25","user_49" "1476730694.000",,4624,"Audit Success",Advapi,2,Interactive,2554484,Information,"host_25","user_49" "1476731633.000",,4624,"Audit Success",Advapi,2,Interactive,2554535,Information,"host_25","user_20" "1476731633.000",,4624,"Audit Success",Advapi,2,Interactive,2554533,Information,"host_25","user_20" "1476732186.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523525,Information,"host_1","user_26" "1476732850.000",,4624,"Audit Success",Advapi,2,Interactive,2554629,Information,"host_25","user_78" "1476732850.000",,4624,"Audit Success",Advapi,2,Interactive,2554627,Information,"host_25","user_78" "1476733434.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523539,Information,"host_1","user_63" "1476734950.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523550,Information,"host_1","user_53" "1476735034.000",,4624,"Audit Success",User32,10,RemoteInteractive,3278452,Information,"host_23","user_1" "1476735062.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523555,Information,"host_1","user_41" "1476735231.000",,4624,"Audit Success",Advapi,2,Interactive,2554815,Information,"host_25","user_147" "1476735231.000",,4624,"Audit Success",Advapi,2,Interactive,2554813,Information,"host_25","user_147" "1476735259.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523562,Information,"host_1","user_94" "1476735272.000",,4624,"Audit Success",Advapi,2,Interactive,20719965,Information,"host_27","user_3" "1476735272.000",,4624,"Audit Success",Advapi,2,Interactive,20719964,Information,"host_27","user_3" "1476735327.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523565,Information,"host_1","user_70" "1476735478.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523570,Information,"host_1","user_112" "1476735776.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523577,Information,"host_1","user_48" "1476736175.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523587,Information,"host_1","user_146" "1476736651.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523597,Information,"host_1","user_16" "1476737077.000",,4624,"Audit Success",Advapi,2,Interactive,2554948,Information,"host_25","user_19" "1476737077.000",,4624,"Audit Success",Advapi,2,Interactive,2554946,Information,"host_25","user_19" "1476737115.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523612,Information,"host_1","user_51" "1476737912.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523627,Information,"host_1","user_65" "1476738101.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523631,Information,"host_1","user_30" "1476738287.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523636,Information,"host_1","user_51" "1476738713.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523647,Information,"host_1","user_30" "1476738887.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523651,Information,"host_1","user_30" "1476739043.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523658,Information,"host_1","user_30" "1476739096.000",,4624,"Audit Success",Advapi,2,Interactive,2555123,Information,"host_25","user_68" "1476739097.000",,4624,"Audit Success",Advapi,2,Interactive,2555125,Information,"host_25","user_68" "1476739374.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523666,Information,"host_1","user_146" "1476740635.000",,4624,"Audit Success",Advapi,2,Interactive,2555212,Information,"host_25","user_126" "1476740635.000",,4624,"Audit Success",Advapi,2,Interactive,2555210,Information,"host_25","user_126" "1476740778.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523679,Information,"host_1","user_146" "1476743338.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523693,Information,"host_1","user_51" "1476743527.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523699,Information,"host_1","user_86" "1476744195.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523711,Information,"host_1","user_146" "1476745493.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523722,Information,"host_1","user_138" "1476745653.000",,4624,"Audit Success",User32,2,Interactive,20720055,Information,"host_27","user_1" "1476747054.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523742,Information,"host_1","user_146" "1476747731.000",,4624,"Audit Success",Advapi,2,Interactive,2555650,Information,"host_25","user_117" "1476747731.000",,4624,"Audit Success",Advapi,2,Interactive,2555648,Information,"host_25","user_117" "1476749972.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523772,Information,"host_1","user_53" "1476751320.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523778,Information,"host_1","user_146" "1476756444.000",,4624,"Audit Success",Advapi,2,Interactive,2555992,Information,"host_25","user_148" "1476756444.000",,4624,"Audit Success",Advapi,2,Interactive,2555990,Information,"host_25","user_148" "1476756985.000",,4624,"Audit Success",Advapi,2,Interactive,2556012,Information,"host_25","user_150" "1476756986.000",,4624,"Audit Success",Advapi,2,Interactive,2556014,Information,"host_25","user_150" "1476757027.000",,4624,"Audit Success",Advapi,2,Interactive,2556017,Information,"host_25","user_72" "1476757028.000",,4624,"Audit Success",Advapi,2,Interactive,2556019,Information,"host_25","user_72" "1476760411.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523823,Information,"host_1","svc_system_monitoring" "1476763537.000",,4624,"Audit Success",Advapi,2,Interactive,2556253,Information,"host_25","user_134" "1476763537.000",,4624,"Audit Success",Advapi,2,Interactive,2556251,Information,"host_25","user_134" "1476764322.000",,4624,"Audit Success",Advapi,2,Interactive,2556287,Information,"host_25","user_116" "1476764322.000",,4624,"Audit Success",Advapi,2,Interactive,2556285,Information,"host_25","user_116" "1476764746.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523845,Information,"host_1","user_34" "1476772931.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523885,Information,"host_1","user_47" "1476775415.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523901,Information,"host_1","user_34" "1476775580.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523910,Information,"host_1","user_34" "1476776528.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523920,Information,"host_1","user_34" "1476778992.000",,4624,"Audit Success",Advapi,2,Interactive,2556805,Information,"host_25","user_17" "1476778992.000",,4624,"Audit Success",Advapi,2,Interactive,2556803,Information,"host_25","user_17" "1476782865.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523951,Information,"host_1","user_39" "1476784369.000",,4624,"Audit Success",User32,10,RemoteInteractive,1523961,Information,"host_1","user_39" "1476798883.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524007,Information,"host_1","user_41" "1476803058.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524026,Information,"host_1","user_66" "1476806239.000",,4624,"Audit Success",Advapi,2,Interactive,2558202,Information,"host_25","user_84" "1476806239.000",,4624,"Audit Success",Advapi,2,Interactive,2558200,Information,"host_25","user_84" "1476806934.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524041,Information,"host_1","user_16" "1476807672.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524049,Information,"host_1","user_26" "1476809487.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524063,Information,"host_1","user_26" "1476809754.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524070,Information,"host_1","user_26" "1476809820.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524076,Information,"host_1","user_52" "1476809966.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524079,Information,"host_1","user_106" "1476810109.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524087,Information,"host_1","user_53" "1476810551.000",,4624,"Audit Success",Advapi,2,Interactive,2558682,Information,"host_25","user_24" "1476810551.000",,4624,"Audit Success",Advapi,2,Interactive,2558680,Information,"host_25","user_24" "1476812122.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524103,Information,"host_1","user_51" "1476812450.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524113,Information,"host_1","user_52" "1476812813.000",,4624,"Audit Success",Advapi,2,Interactive,2688488578,Information,"host_5","user_3" "1476812814.000",,4624,"Audit Success",User32,10,RemoteInteractive,2688489132,Information,"host_5","user_91" "1476812900.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524122,Information,"host_1","user_48" "1476812940.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524126,Information,"host_1","svc_system_monitoring" "1476813050.000",,4624,"Audit Success",Advapi,2,Interactive,2558902,Information,"host_25","user_109" "1476813050.000",,4624,"Audit Success",Advapi,2,Interactive,2558900,Information,"host_25","user_109" "1476813631.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524136,Information,"host_1","user_146" "1476813960.000",,4624,"Audit Success",User32,10,RemoteInteractive,1245134480,Information,"host_15","user_91" "1476814090.000",,4624,"Audit Success",User32,10,RemoteInteractive,397503697,Information,"host_16","user_91" "1476814119.000",,4624,"Audit Success",User32,10,RemoteInteractive,842333024,Information,"host_13","user_91" "1476814164.000",,4624,"Audit Success",User32,10,RemoteInteractive,1353018433,Information,"host_14","user_91" "1476814862.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524155,Information,"host_1","user_133" "1476814979.000",,4624,"Audit Success",User32,10,RemoteInteractive,1353019802,Information,"host_14","user_91" "1476815571.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524159,Information,"host_1","user_12" "1476815608.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524162,Information,"host_1","user_47" "1476816474.000",,4624,"Audit Success",Advapi,2,Interactive,2689671993,Information,"host_5","user_3" "1476816864.000",,4624,"Audit Success",Advapi,2,Interactive,2559276,Information,"host_25","user_149" "1476816864.000",,4624,"Audit Success",Advapi,2,Interactive,2559274,Information,"host_25","user_149" "1476817700.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524182,Information,"host_1","user_106" "1476818909.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524201,Information,"host_1","user_52" "1476818987.000",,4624,"Audit Success",Advapi,2,Interactive,2559436,Information,"host_25","user_11" "1476818987.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524209,Information,"host_1","user_52" "1476818988.000",,4624,"Audit Success",Advapi,2,Interactive,2559438,Information,"host_25","user_11" "1476819152.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524223,Information,"host_1","user_104" "1476819306.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524229,Information,"host_1","user_104" "1476819384.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524242,Information,"host_1","user_104" "1476819496.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524250,Information,"host_1","user_104" "1476819546.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524262,Information,"host_1","user_104" "1476819775.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524272,Information,"host_1","user_53" "1476819937.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524282,Information,"host_1","user_53" "1476820670.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524296,Information,"host_1","user_30" "1476821192.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524310,Information,"host_1","user_31" "1476821307.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524316,Information,"host_1","user_51" "1476822122.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524322,Information,"host_1","user_146" "1476822306.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524331,Information,"host_1","user_53" "1476822946.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524346,Information,"host_1","user_31" "1476822988.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524352,Information,"host_1","user_51" "1476823537.000",,4624,"Audit Success",Advapi,2,Interactive,2559756,Information,"host_25","user_44" "1476823537.000",,4624,"Audit Success",Advapi,2,Interactive,2559754,Information,"host_25","user_44" "1476824555.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524365,Information,"host_1","user_106" "1476824693.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524372,Information,"host_1","user_86" "1476825019.000",,4624,"Audit Success",Advapi,2,Interactive,2559891,Information,"host_25","user_80" "1476825019.000",,4624,"Audit Success",Advapi,2,Interactive,2559889,Information,"host_25","user_80" "1476826552.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524399,Information,"host_1","user_12" "1476829355.000",,4624,"Audit Success",Advapi,2,Interactive,2560200,Information,"host_25","user_40" "1476829356.000",,4624,"Audit Success",Advapi,2,Interactive,2560202,Information,"host_25","user_40" "1476830981.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524416,Information,"host_1","user_114" "1476832356.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524427,Information,"host_1","user_113" "1476832770.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524438,Information,"host_1","user_106" "1476833533.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524452,Information,"host_1","user_146" "1476833806.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524460,Information,"host_1","user_51" "1476834957.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524476,Information,"host_1","user_104" "1476835500.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524492,Information,"host_1","user_41" "1476836211.000",,4624,"Audit Success",User32,10,RemoteInteractive,384123,Information,"host_24","user_47" "1476838207.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524507,Information,"host_1","user_104" "1476838582.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524518,Information,"host_1","user_104" "1476838705.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524527,Information,"host_1","user_104" "1476838953.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524540,Information,"host_1","user_104" "1476839176.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524547,Information,"host_1","user_104" "1476840343.000",,4624,"Audit Success",Advapi,2,Interactive,2560690,Information,"host_25","user_67" "1476840343.000",,4624,"Audit Success",Advapi,2,Interactive,2560692,Information,"host_25","user_67" "1476843254.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524562,Information,"host_1","user_34" "1476843826.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524572,Information,"host_1","user_133" "1476845028.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524583,Information,"host_1","user_133" "1476846034.000",,4624,"Audit Success",Advapi,2,Interactive,2560891,Information,"host_25","user_27" "1476846034.000",,4624,"Audit Success",Advapi,2,Interactive,2560889,Information,"host_25","user_27" "1476865202.000",,4624,"Audit Success",Advapi,2,Interactive,2561608,Information,"host_25","user_127" "1476865203.000",,4624,"Audit Success",Advapi,2,Interactive,2561610,Information,"host_25","user_127" "1476868135.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524670,Information,"host_1","user_34" "1476869487.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524681,Information,"host_1","user_34" "1476870179.000",,4624,"Audit Success",Advapi,2,Interactive,2561719,Information,"host_25","user_54" "1476870179.000",,4624,"Audit Success",Advapi,2,Interactive,2561716,Information,"host_25","user_54" "1476872619.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524701,Information,"host_1","user_39" "1476872943.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524707,Information,"host_1","user_39" "1476874005.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524714,Information,"host_1","user_34" "1476875304.000",,4624,"Audit Success",Advapi,2,Interactive,2561845,Information,"host_25","user_119" "1476875304.000",,4624,"Audit Success",Advapi,2,Interactive,2561843,Information,"host_25","user_119" "1476881657.000",,4624,"Audit Success",Advapi,2,Interactive,2562104,Information,"host_25","user_33" "1476881657.000",,4624,"Audit Success",Advapi,2,Interactive,2562102,Information,"host_25","user_33" "1476881767.000",,4624,"Audit Success",Advapi,2,Interactive,2562122,Information,"host_25","user_128" "1476881767.000",,4624,"Audit Success",Advapi,2,Interactive,2562120,Information,"host_25","user_128" "1476884763.000",,4624,"Audit Success",Advapi,2,Interactive,2562317,Information,"host_25","user_105" "1476884764.000",,4624,"Audit Success",Advapi,2,Interactive,2562319,Information,"host_25","user_105" "1476887878.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524758,Information,"host_1","user_113" "1476888603.000",,4624,"Audit Success",Advapi,2,Interactive,2562640,Information,"host_25","user_18" "1476888604.000",,4624,"Audit Success",Advapi,2,Interactive,2562642,Information,"host_25","user_18" "1476890635.000",,4624,"Audit Success",Advapi,2,Interactive,2562833,Information,"host_25","user_123" "1476890635.000",,4624,"Audit Success",Advapi,2,Interactive,2562831,Information,"host_25","user_123" "1476893514.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524778,Information,"host_1","user_39" "1476893873.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524785,Information,"host_1","user_39" "1476894644.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524796,Information,"host_1","user_106" "1476895308.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524799,Information,"host_1","user_52" "1476896091.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524818,Information,"host_1","user_16" "1476896163.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524821,Information,"host_1","user_47" "1476896694.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524832,Information,"host_1","user_53" "1476897731.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524837,Information,"host_1","user_112" "1476897792.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524842,Information,"host_1","user_51" "1476898256.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524852,Information,"host_1","user_51" "1476899884.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524866,Information,"host_1","user_146" "1476900582.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524884,Information,"host_1","user_51" "1476902257.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524901,Information,"host_1","user_88" "1476902747.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524916,Information,"host_1","user_133" "1476907608.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524951,Information,"host_1","user_104" "1476907854.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524966,Information,"host_1","user_53" "1476909696.000",,4624,"Audit Success",User32,10,RemoteInteractive,1524989,Information,"host_1","user_146" "1476910567.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525007,Information,"host_1","user_26" "1476911661.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525032,Information,"host_1","user_146" "1476912273.000",,4624,"Audit Success",User32,10,RemoteInteractive,3281892,Information,"host_23","user_9" "1476912775.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525048,Information,"host_1","user_30" "1476914457.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525072,Information,"host_1","user_51" "1476916099.000",,4624,"Audit Success",User32,10,RemoteInteractive,843231432,Information,"host_13","user_91" "1476916380.000",,4624,"Audit Success",User32,10,RemoteInteractive,2131902478,Information,"host_17","user_91" "1476916597.000",,4624,"Audit Success",User32,10,RemoteInteractive,149936930,Information,"host_19","user_91" "1476916628.000",,4624,"Audit Success",User32,10,RemoteInteractive,243532029,Information,"host_21","user_91" "1476918783.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525110,Information,"host_1","user_12" "1476920323.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525126,Information,"host_1","user_104" "1476920598.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525132,Information,"host_1","user_146" "1476921014.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525147,Information,"host_1","user_146" "1476925297.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525173,Information,"host_1","user_104" "1476925337.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525178,Information,"host_1","user_52" "1476925509.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525184,Information,"host_1","user_104" "1476934468.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525219,Information,"host_1","user_34" "1476935252.000",,4624,"Audit Success",Advapi,2,Interactive,933029954,Information,"host_11","user_3" "1476935261.000",,4624,"Audit Success",User32,10,RemoteInteractive,933030781,Information,"host_11","user_139" "1476947292.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525266,Information,"host_1","user_34" "1476948640.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525280,Information,"host_1","user_34" "1476956393.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525312,Information,"host_1","user_39" "1476971877.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525369,Information,"host_1","user_26" "1476980123.000",,4624,"Audit Success",User32,10,RemoteInteractive,3282937,Information,"host_23","user_1" "1476981106.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525399,Information,"host_1","user_106" "1476981381.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525403,Information,"host_1","user_82" "1476981435.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525408,Information,"host_1","user_12" "1476982624.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525417,Information,"host_1","user_86" "1476982987.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525426,Information,"host_1","user_138" "1476983241.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525430,Information,"host_1","user_52" "1476983258.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525436,Information,"host_1","user_53" "1476983844.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525445,Information,"host_1","user_112" "1476984301.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525453,Information,"host_1","user_51" "1476984553.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525458,Information,"host_1","user_146" "1476984681.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525464,Information,"host_1","svc_system_monitoring" "1476984716.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525471,Information,"host_1","user_104" "1476985362.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525478,Information,"host_1","user_113" "1476986951.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525501,Information,"host_1","user_114" "1476987435.000",,4624,"Audit Success",Advapi,2,Interactive,20721907,Information,"host_27","user_3" "1476987435.000",,4624,"Audit Success",Advapi,2,Interactive,20721906,Information,"host_27","user_3" "1476988608.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525511,Information,"host_1","user_12" "1476989249.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525519,Information,"host_1","user_16" "1476990958.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525538,Information,"host_1","user_66" "1476997737.000",,4624,"Audit Success",Advapi,2,Interactive,20722000,Information,"host_27","user_3" "1476997737.000",,4624,"Audit Success",Advapi,2,Interactive,20721999,Information,"host_27","user_3" "1476997855.000",,4624,"Audit Success",Advapi,2,Interactive,20722011,Information,"host_27","user_3" "1476997855.000",,4624,"Audit Success",Advapi,2,Interactive,20722010,Information,"host_27","user_3" "1476997888.000",,4624,"Audit Success",User32,10,RemoteInteractive,20722018,Information,"host_27","user_1" "1476997890.000",,4624,"Audit Success",Advapi,2,Interactive,20722022,Information,"host_27","user_4" "1476997890.000",,4624,"Audit Success",Advapi,2,Interactive,20722021,Information,"host_27","user_4" "1477000581.000",,4624,"Audit Success",User32,2,Interactive,1525582,Information,"host_1","user_1" "1477000876.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525594,Information,"host_1","user_104" "1477000950.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525602,Information,"host_1","user_146" "1477001016.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525610,Information,"host_1","user_143" "1477001070.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525614,Information,"host_1","user_95" "1477001178.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525618,Information,"host_1","user_52" "1477001226.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525627,Information,"host_1","user_53" "1477001297.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525635,Information,"host_1","user_16" "1477001347.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525640,Information,"host_1","user_106" "1477001383.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525647,Information,"host_1","user_12" "1477001707.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525660,Information,"host_1","user_146" "1477001799.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525669,Information,"host_1","user_133" "1477002036.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525673,Information,"host_1","user_47" "1477003878.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525689,Information,"host_1","user_53" "1477004299.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525695,Information,"host_1","user_48" "1477004632.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525700,Information,"host_1","user_146" "1477006157.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525718,Information,"host_1","user_16" "1477006888.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525731,Information,"host_1","user_34" "1477007626.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525749,Information,"host_1","user_146" "1477007635.000",,4624,"Audit Success",User32,10,RemoteInteractive,2569629,Information,"host_25","user_146" "1477007635.000",,4624,"Audit Success",User32,10,RemoteInteractive,2569628,Information,"host_25","user_146" "1477007635.000",,4624,"Audit Success",User32,10,RemoteInteractive,2651711,Information,"host_26","user_146" "1477008212.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525761,Information,"host_1","user_146" "1477009035.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525774,Information,"host_1","user_112" "1477009078.000",,4624,"Audit Success",User32,10,RemoteInteractive,2652284,Information,"host_26","user_146" "1477010889.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525792,Information,"host_1","user_34" "1477011068.000",,4624,"Audit Success",User32,10,RemoteInteractive,2570145,Information,"host_25","user_146" "1477013352.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525817,Information,"host_1","user_138" "1477014663.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525828,Information,"host_1","user_138" "1477015696.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525842,Information,"host_1","user_34" "1477017019.000",,4624,"Audit Success",User32,10,RemoteInteractive,3283083,Information,"host_23","user_1" "1477021705.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525914,Information,"host_1","user_26" "1477022537.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525919,Information,"host_1","user_26" "1477023844.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525930,Information,"host_1","user_26" "1477024964.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525945,Information,"host_1","user_34" "1477025954.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525952,Information,"host_1","user_146" "1477029345.000",,4624,"Audit Success",User32,10,RemoteInteractive,1525995,Information,"host_1","user_26" "1477047571.000",,4624,"Audit Success",Advapi,2,Interactive,190785640,Information,"host_2","user_3" "1477047571.000",,4624,"Audit Success",Advapi,2,Interactive,2738384817,Information,"host_5","user_3" "1477047573.000",,4624,"Audit Success",Advapi,2,Interactive,151102693,Information,"host_3","user_3" "1477047574.000",,4624,"Audit Success",Advapi,2,Interactive,167754461,Information,"host_7","user_3" "1477047575.000",,4624,"Audit Success",Advapi,2,Interactive,113389021,Information,"host_4","user_3" "1477047578.000",,4624,"Audit Success",User32,10,RemoteInteractive,151102723,Information,"host_3","user_96" "1477047886.000",,4624,"Audit Success",Advapi,2,Interactive,941353565,Information,"host_11","user_3" "1477047889.000",,4624,"Audit Success",Advapi,2,Interactive,926848588,Information,"host_12","user_3" "1477047943.000",,4624,"Audit Success",User32,10,RemoteInteractive,941358104,Information,"host_11","user_96" "1477047944.000",,4624,"Audit Success",User32,10,RemoteInteractive,926852227,Information,"host_12","user_96" "1477047950.000",,4624,"Audit Success",Advapi,2,Interactive,190787982,Information,"host_2","user_3" "1477047952.000",,4624,"Audit Success",User32,10,RemoteInteractive,190787998,Information,"host_2","user_96" "1477047954.000",,4624,"Audit Success",Advapi,2,Interactive,113389741,Information,"host_4","user_3" "1477047956.000",,4624,"Audit Success",Advapi,2,Interactive,167757111,Information,"host_7","user_3" "1477047963.000",,4624,"Audit Success",User32,10,RemoteInteractive,113389752,Information,"host_4","user_96" "1477047968.000",,4624,"Audit Success",User32,10,RemoteInteractive,167757311,Information,"host_7","user_96" "1477061372.000",,4624,"Audit Success",User32,2,Interactive,3283229,Information,"host_23","user_9" "1477062944.000",,4624,"Audit Success",User32,10,RemoteInteractive,1526096,Information,"host_1","user_100" "1477063935.000",,4624,"Audit Success",User32,10,RemoteInteractive,1526104,Information,"host_1","user_146" "1477064371.000",,4624,"Audit Success",User32,10,RemoteInteractive,2655334,Information,"host_26","user_146" "1477064727.000",,4624,"Audit Success",User32,10,RemoteInteractive,2655398,Information,"host_26","user_146" "1477064795.000",,4624,"Audit Success",User32,10,RemoteInteractive,2655405,Information,"host_26","user_146" "1477066461.000",,4624,"Audit Success",User32,10,RemoteInteractive,1526120,Information,"host_1","user_112" "1477067356.000",,4624,"Audit Success",User32,10,RemoteInteractive,948083275,Information,"host_8","user_124" "1477067786.000",,4624,"Audit Success",User32,10,RemoteInteractive,1526124,Information,"host_1","user_106" "1477068381.000",,4624,"Audit Success",User32,10,RemoteInteractive,1432899109,Information,"host_9","user_110" "1477069895.000",,4624,"Audit Success",User32,10,RemoteInteractive,2743697897,Information,"host_5","user_110" "1477071049.000",,4624,"Audit Success",User32,10,RemoteInteractive,1526147,Information,"host_1","user_94" "1477071409.000",,4624,"Audit Success",User32,10,RemoteInteractive,1526153,Information,"host_1","user_94" "1477071830.000",,4624,"Audit Success",User32,10,RemoteInteractive,1526158,Information,"host_1","user_16" "1477073083.000",,4624,"Audit Success",User32,10,RemoteInteractive,1526172,Information,"host_1","user_51" "1477073930.000",,4624,"Audit Success",User32,10,RemoteInteractive,1526177,Information,"host_1","user_143" "1477075725.000",,4624,"Audit Success",User32,10,RemoteInteractive,1526190,Information,"host_1","user_16" "1477079430.000",,4624,"Audit Success",User32,10,RemoteInteractive,1526208,Information,"host_1","user_106" "1477080571.000",,4624,"Audit Success",User32,10,RemoteInteractive,1526220,Information,"host_1","user_26" "1477080685.000",,4624,"Audit Success",User32,10,RemoteInteractive,1526225,Information,"host_1","user_106" "1477083164.000",,4624,"Audit Success",User32,10,RemoteInteractive,1526238,Information,"host_1","user_26" "1477083494.000",,4624,"Audit Success",User32,10,RemoteInteractive,1526244,Information,"host_1","user_52" "1477087887.000",,4624,"Audit Success",User32,10,RemoteInteractive,1526273,Information,"host_1","user_122" "1477090705.000",,4624,"Audit Success",Advapi,2,Interactive,20722731,Information,"host_27","user_3" "1477090705.000",,4624,"Audit Success",Advapi,2,Interactive,20722730,Information,"host_27","user_3" "1477090747.000",,4624,"Audit Success",User32,10,RemoteInteractive,20722737,Information,"host_27","user_1" "1477093473.000",,4624,"Audit Success",User32,10,RemoteInteractive,1526292,Information,"host_1","user_16" "1477106731.000",,4624,"Audit Success",User32,2,Interactive,20722862,Information,"host_27","user_1" "1477111093.000",,4624,"Audit Success",User32,10,RemoteInteractive,1526356,Information,"host_1","user_104" "1477129343.000",,4624,"Audit Success",User32,10,RemoteInteractive,1526423,Information,"host_1","user_104" "1477148648.000",,4624,"Audit Success",User32,10,RemoteInteractive,1436917914,Information,"host_9","user_110" "1477149379.000",,4624,"Audit Success",User32,2,Interactive,149939807,Information,"host_19","user_110" "1477150563.000",,4624,"Audit Success",User32,10,RemoteInteractive,149940799,Information,"host_19","user_110" "1477151574.000",,4624,"Audit Success",User32,10,RemoteInteractive,243536202,Information,"host_21","user_110" "1477152116.000",,4624,"Audit Success",User32,10,RemoteInteractive,1526488,Information,"host_1","user_146" "1477154537.000",,4624,"Audit Success",User32,10,RemoteInteractive,1269393752,Information,"host_10","user_110" "1477155428.000",,4624,"Audit Success",User32,10,RemoteInteractive,243540723,Information,"host_21","user_111" "1477156700.000",,4624,"Audit Success",User32,10,RemoteInteractive,843259746,Information,"host_13","user_110" "1477156789.000",,4624,"Audit Success",User32,10,RemoteInteractive,1353205085,Information,"host_14","user_110" "1477158111.000",,4624,"Audit Success",User32,10,RemoteInteractive,1245293567,Information,"host_15","user_110" "1477158564.000",,4624,"Audit Success",User32,10,RemoteInteractive,397752554,Information,"host_16","user_110" "1477160049.000",,4624,"Audit Success",User32,10,RemoteInteractive,2131940034,Information,"host_17","user_110" "1477160907.000",,4624,"Audit Success",User32,10,RemoteInteractive,843273538,Information,"host_13","user_110" "1477161301.000",,4624,"Audit Success",User32,10,RemoteInteractive,2131979638,Information,"host_17","user_110" "1477163094.000",,4624,"Audit Success",Advapi,2,Interactive,2756709579,Information,"host_5","user_5" "1477163097.000",,4624,"Audit Success",User32,10,RemoteInteractive,2756709871,Information,"host_5","user_110" "1477163682.000",,4624,"Audit Success",Advapi,2,Interactive,2756776712,Information,"host_5","user_4" "1477163683.000",,4624,"Audit Success",User32,10,RemoteInteractive,2756776947,Information,"host_5","user_110" "1477164330.000",,4624,"Audit Success",User32,10,RemoteInteractive,1526574,Information,"host_1","user_26" "1477167216.000",,4624,"Audit Success",User32,2,Interactive,330509,Information,"host_22","user_1" "1477167260.000",,4624,"Audit Success",User32,10,RemoteInteractive,330515,Information,"host_22","user_47" "1477172064.000",,4624,"Audit Success",User32,10,RemoteInteractive,243550789,Information,"host_20","user_61" "1477173113.000",,4624,"Audit Success",User32,10,RemoteInteractive,149950899,Information,"host_18","user_61" "1477173364.000",,4624,"Audit Success",User32,10,RemoteInteractive,1526613,Information,"host_1","user_26" "1477186789.000",,4624,"Audit Success",User32,10,RemoteInteractive,1526704,Information,"host_1","user_104" "1477188523.000",,4624,"Audit Success",Advapi,2,Interactive,948857998,Information,"host_11","user_4" "1477188545.000",,4624,"Audit Success",User32,10,RemoteInteractive,948858961,Information,"host_11","user_144" "1477273117.000",,4624,"Audit Success",Advapi,2,Interactive,952866363,Information,"host_11","user_4" "1477273142.000",,4624,"Audit Success",User32,10,RemoteInteractive,952867753,Information,"host_11","user_139" "1477288150.000",,4624,"Audit Success",Advapi,2,Interactive,192634074,Information,"host_2","user_4" "1477288150.000",,4624,"Audit Success",Advapi,2,Interactive,2770905644,Information,"host_5","user_4" "1477288165.000",,4624,"Audit Success",User32,10,RemoteInteractive,2770907416,Information,"host_5","user_96" "1477288168.000",,4624,"Audit Success",User32,10,RemoteInteractive,192634369,Information,"host_2","user_96" "1477288228.000",,4624,"Audit Success",Advapi,2,Interactive,155886081,Information,"host_3","user_4" "1477288230.000",,4624,"Audit Success",User32,10,RemoteInteractive,155886160,Information,"host_3","user_96" "1477288348.000",,4624,"Audit Success",Advapi,2,Interactive,2770928797,Information,"host_5","user_3" "1477288350.000",,4624,"Audit Success",User32,10,RemoteInteractive,2770928875,Information,"host_5","user_97" "1477288359.000",,4624,"Audit Success",Advapi,2,Interactive,953643993,Information,"host_11","user_4" "1477288360.000",,4624,"Audit Success",Advapi,2,Interactive,192636751,Information,"host_2","user_3" "1477288361.000",,4624,"Audit Success",User32,10,RemoteInteractive,192636790,Information,"host_2","user_97" "1477288363.000",,4624,"Audit Success",User32,10,RemoteInteractive,953644266,Information,"host_11","user_97" "1477291331.000",,4624,"Audit Success",User32,10,RemoteInteractive,1526993,Information,"host_1","svc_system_monitoring" "1477291952.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527000,Information,"host_1","user_39" "1477293220.000",,4624,"Audit Success",Advapi,2,Interactive,194071922,Information,"host_2","user_2" "1477293498.000",,4624,"Audit Success",Advapi,2,Interactive,194073202,Information,"host_2","user_3" "1477293501.000",,4624,"Audit Success",User32,10,RemoteInteractive,194073213,Information,"host_2","user_97" "1477293799.000",,4624,"Audit Success",Advapi,2,Interactive,194073689,Information,"host_2","user_2" "1477294167.000",,4624,"Audit Success",Advapi,2,Interactive,194075292,Information,"host_2","user_3" "1477294172.000",,4624,"Audit Success",User32,10,RemoteInteractive,194075686,Information,"host_2","user_97" "1477296833.000",,4624,"Audit Success",Advapi,2,Interactive,156066821,Information,"host_3","user_3" "1477296835.000",,4624,"Audit Success",User32,10,RemoteInteractive,156066835,Information,"host_3","user_97" "1477296920.000",,4624,"Audit Success",Advapi,2,Interactive,114444253,Information,"host_4","user_4" "1477296923.000",,4624,"Audit Success",User32,10,RemoteInteractive,114444267,Information,"host_4","user_97" "1477296938.000",,4624,"Audit Success",Advapi,2,Interactive,169813082,Information,"host_7","user_4" "1477296939.000",,4624,"Audit Success",User32,10,RemoteInteractive,169813139,Information,"host_7","user_97" "1477298025.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527024,Information,"host_1","user_34" "1477300185.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527034,Information,"host_1","user_39" "1477300757.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527042,Information,"host_1","user_39" "1477302054.000",,4624,"Audit Success",Advapi,2,Interactive,157168067,Information,"host_3","user_2" "1477302226.000",,4624,"Audit Success",Advapi,2,Interactive,157169565,Information,"host_3","user_3" "1477302229.000",,4624,"Audit Success",User32,10,RemoteInteractive,157169580,Information,"host_3","user_97" "1477304845.000",,4624,"Audit Success",Advapi,2,Interactive,2770944274,Information,"host_5","user_2" "1477305509.000",,4624,"Audit Success",Advapi,2,Interactive,2770952762,Information,"host_5","user_3" "1477305511.000",,4624,"Audit Success",User32,10,RemoteInteractive,2770952801,Information,"host_5","user_97" "1477307997.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527074,Information,"host_1","user_39" "1477318520.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527110,Information,"host_1","user_66" "1477324622.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527131,Information,"host_1","user_16" "1477325680.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527141,Information,"host_1","user_133" "1477326062.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527146,Information,"host_1","user_112" "1477326437.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527150,Information,"host_1","user_70" "1477328195.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527160,Information,"host_1","user_106" "1477328939.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527163,Information,"host_1","user_66" "1477328942.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527166,Information,"host_1","user_52" "1477329163.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527174,Information,"host_1","user_146" "1477329625.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527182,Information,"host_1","user_114" "1477329895.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527186,Information,"host_1","user_86" "1477330422.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527191,Information,"host_1","user_51" "1477330430.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527196,Information,"host_1","user_104" "1477330510.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527202,Information,"host_1","user_114" "1477331084.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527210,Information,"host_1","user_82" "1477331208.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527217,Information,"host_1","user_16" "1477331651.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527234,Information,"host_1","user_86" "1477332209.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527246,Information,"host_1","user_122" "1477332302.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527254,Information,"host_1","user_51" "1477332400.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527262,Information,"host_1","user_51" "1477335118.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527296,Information,"host_1","user_51" "1477335632.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527307,Information,"host_1","user_12" "1477335752.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527315,Information,"host_1","user_106" "1477336200.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527320,Information,"host_1","user_100" "1477336326.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527325,Information,"host_1","user_146" "1477337458.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527345,Information,"host_1","user_51" "1477338901.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527353,Information,"host_1","user_16" "1477340154.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527372,Information,"host_1","user_52" "1477340409.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527377,Information,"host_1","user_146" "1477341984.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527394,Information,"host_1","user_48" "1477342205.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527403,Information,"host_1","user_138" "1477343734.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527429,Information,"host_1","user_16" "1477344842.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527437,Information,"host_1","user_51" "1477349003.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527469,Information,"host_1","user_53" "1477349537.000",,4624,"Audit Success",User32,10,RemoteInteractive,3284085,Information,"host_23","user_1" "1477352385.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527501,Information,"host_1","user_53" "1477352449.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527507,Information,"host_1","user_41" "1477356492.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527546,Information,"host_1","user_34" "1477356909.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527556,Information,"host_1","user_100" "1477357886.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527565,Information,"host_1","user_34" "1477361947.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527600,Information,"host_1","user_34" "1477383453.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527683,Information,"host_1","user_39" "1477384867.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527697,Information,"host_1","user_39" "1477403433.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527761,Information,"host_1","user_39" "1477413904.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527801,Information,"host_1","user_145" "1477413918.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527806,Information,"host_1","user_146" "1477415598.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527816,Information,"host_1","user_52" "1477416897.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527826,Information,"host_1","user_106" "1477416917.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527830,Information,"host_1","user_146" "1477417247.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527846,Information,"host_1","user_112" "1477417554.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527851,Information,"host_1","user_51" "1477418096.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527866,Information,"host_1","user_12" "1477418226.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527874,Information,"host_1","user_138" "1477418284.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527888,Information,"host_1","user_22" "1477418430.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527895,Information,"host_1","user_22" "1477422477.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527917,Information,"host_1","user_26" "1477425978.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527944,Information,"host_1","user_146" "1477426156.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527950,Information,"host_1","user_122" "1477428425.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527964,Information,"host_1","user_51" "1477429260.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527974,Information,"host_1","user_133" "1477429294.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527981,Information,"host_1","user_53" "1477429354.000",,4624,"Audit Success",User32,10,RemoteInteractive,1527986,Information,"host_1","user_16" "1477432373.000",,4624,"Audit Success",User32,10,RemoteInteractive,1528029,Information,"host_1","user_26" "1477434699.000",,4624,"Audit Success",User32,10,RemoteInteractive,1528045,Information,"host_1","user_51" "1477434870.000",,4624,"Audit Success",User32,10,RemoteInteractive,1528049,Information,"host_1","user_70" "1477436143.000",,4624,"Audit Success",User32,10,RemoteInteractive,1528064,Information,"host_1","user_16" "1477436911.000",,4624,"Audit Success",User32,10,RemoteInteractive,1528074,Information,"host_1","user_12" "1477436999.000",,4624,"Audit Success",User32,10,RemoteInteractive,1528083,Information,"host_1","user_16" "1477445270.000",,4624,"Audit Success",Advapi,2,Interactive,965083623,Information,"host_11","user_5" "1477445409.000",,4624,"Audit Success",Advapi,2,Interactive,965094817,Information,"host_11","user_5" "1477445411.000",,4624,"Audit Success",User32,10,RemoteInteractive,965094932,Information,"host_11","user_13" "1477489651.000",,4624,"Audit Success",User32,10,RemoteInteractive,1528276,Information,"host_1","user_39" "1477499968.000",,4624,"Audit Success",User32,10,RemoteInteractive,1528310,Information,"host_1","user_12" "1477502039.000",,4624,"Audit Success",User32,10,RemoteInteractive,1528318,Information,"host_1","user_52" "1477502047.000",,4624,"Audit Success",User32,10,RemoteInteractive,1528321,Information,"host_1","user_86" "1477502292.000",,4624,"Audit Success",User32,10,RemoteInteractive,1528328,Information,"host_1","user_26" "1477503379.000",,4624,"Audit Success",User32,10,RemoteInteractive,1528339,Information,"host_1","user_146" "1477503603.000",,4624,"Audit Success",User32,10,RemoteInteractive,1528346,Information,"host_1","user_51" "1477504590.000",,4624,"Audit Success",User32,10,RemoteInteractive,1528352,Information,"host_1","user_16" "1477505061.000",,4624,"Audit Success",User32,10,RemoteInteractive,1528361,Information,"host_1","user_100" "1477506778.000",,4624,"Audit Success",User32,10,RemoteInteractive,1528385,Information,"host_1","user_112" "1477510179.000",,4624,"Audit Success",Advapi,2,Interactive,969446752,Information,"host_11","user_5" "1477510206.000",,4624,"Audit Success",User32,10,RemoteInteractive,969448673,Information,"host_11","user_144" "1477511333.000",,4624,"Audit Success",User32,10,RemoteInteractive,1528421,Information,"host_1","user_106" "1477512022.000",,4624,"Audit Success",User32,10,RemoteInteractive,1528439,Information,"host_1","user_138" "1477512059.000",,4624,"Audit Success",User32,10,RemoteInteractive,1528443,Information,"host_1","user_106" "1477512430.000",,4624,"Audit Success",User32,10,RemoteInteractive,1528447,Information,"host_1","user_12" "1477512624.000",,4624,"Audit Success",User32,10,RemoteInteractive,3284581,Information,"host_23","user_1" "1477515506.000",,4624,"Audit Success",User32,10,RemoteInteractive,1528489,Information,"host_1","user_86" "1477515802.000",,4624,"Audit Success",User32,10,RemoteInteractive,1528494,Information,"host_1","user_12" "1477515856.000",,4624,"Audit Success",User32,10,RemoteInteractive,1528500,Information,"host_1","user_51" "1477516349.000",,4624,"Audit Success",User32,10,RemoteInteractive,1528509,Information,"host_1","user_16" "1477522060.000",,4624,"Audit Success",User32,10,RemoteInteractive,1528555,Information,"host_1","user_122" "1477522378.000",,4624,"Audit Success",User32,10,RemoteInteractive,1528563,Information,"host_1","user_86" "1477522514.000",,4624,"Audit Success",User32,10,RemoteInteractive,1528571,Information,"host_1","user_48" "1477523173.000",,4624,"Audit Success",User32,10,RemoteInteractive,1528576,Information,"host_1","user_51" "1477523963.000",,4624,"Audit Success",User32,10,RemoteInteractive,1528592,Information,"host_1","user_53" "1477525090.000",,4624,"Audit Success",User32,10,RemoteInteractive,1528610,Information,"host_1","user_133" "1477583243.000",,4624,"Audit Success",User32,10,RemoteInteractive,1528803,Information,"host_1","user_12" "1477586393.000",,4624,"Audit Success",User32,10,RemoteInteractive,1528816,Information,"host_1","user_146" "1477587696.000",,4624,"Audit Success",User32,10,RemoteInteractive,1528840,Information,"host_1","user_52" "1477588535.000",,4624,"Audit Success",User32,10,RemoteInteractive,1528847,Information,"host_1","user_26" "1477592212.000",,4624,"Audit Success",User32,10,RemoteInteractive,1528865,Information,"host_1","user_16" "1477592714.000",,4624,"Audit Success",User32,10,RemoteInteractive,1528875,Information,"host_1","user_112" "1477593260.000",,4624,"Audit Success",User32,10,RemoteInteractive,1528882,Information,"host_1","user_31" "1477593521.000",,4624,"Audit Success",User32,10,RemoteInteractive,1528890,Information,"host_1","user_31" "1477595328.000",,4624,"Audit Success",User32,10,RemoteInteractive,1528904,Information,"host_1","user_16" "1477598549.000",,4624,"Audit Success",User32,10,RemoteInteractive,1528918,Information,"host_1","user_112" "1477601753.000",,4624,"Audit Success",User32,10,RemoteInteractive,1528935,Information,"host_1","user_106" "1477601923.000",,4624,"Audit Success",User32,10,RemoteInteractive,1528939,Information,"host_1","user_146" "1477602177.000",,4624,"Audit Success",User32,10,RemoteInteractive,1528946,Information,"host_1","user_146" "1477606126.000",,4624,"Audit Success",User32,10,RemoteInteractive,1528973,Information,"host_1","user_12" "1477606416.000",,4624,"Audit Success",User32,10,RemoteInteractive,1528979,Information,"host_1","user_16" "1477607583.000",,4624,"Audit Success",User32,10,RemoteInteractive,1528991,Information,"host_1","user_52" "1477608912.000",,4624,"Audit Success",User32,10,RemoteInteractive,1529002,Information,"host_1","user_53" "1477614174.000",,4624,"Audit Success",User32,10,RemoteInteractive,1529030,Information,"host_1","user_51" "1477614396.000",,4624,"Audit Success",User32,10,RemoteInteractive,1529040,Information,"host_1","user_26" "1477616311.000",,4624,"Audit Success",User32,10,RemoteInteractive,1529053,Information,"host_1","user_42" "1477616627.000",,4624,"Audit Success",User32,10,RemoteInteractive,1529060,Information,"host_1","user_26" "1477620185.000",,4624,"Audit Success",User32,10,RemoteInteractive,1529077,Information,"host_1","user_95" "1477633271.000",,4624,"Audit Success",User32,10,RemoteInteractive,1529123,Information,"host_1","user_34" "1477635065.000",,4624,"Audit Success",User32,10,RemoteInteractive,1529133,Information,"host_1","user_34" "1477647803.000",,4624,"Audit Success",User32,10,RemoteInteractive,1529183,Information,"host_1","user_39" "1477648261.000",,4624,"Audit Success",Advapi,2,Interactive,968661227,Information,"host_12","user_4" "1477648271.000",,4624,"Audit Success",User32,10,RemoteInteractive,968661828,Information,"host_12","user_10" "1477673888.000",,4624,"Audit Success",User32,10,RemoteInteractive,1529265,Information,"host_1","user_26" "1477674257.000",,4624,"Audit Success",User32,10,RemoteInteractive,1529273,Information,"host_1","user_52" "1477674726.000",,4624,"Audit Success",User32,10,RemoteInteractive,1529277,Information,"host_1","user_146" "1477675297.000",,4624,"Audit Success",User32,10,RemoteInteractive,1529283,Information,"host_1","user_26" "1477676755.000",,4624,"Audit Success",User32,10,RemoteInteractive,1529299,Information,"host_1","user_106" "1477677686.000",,4624,"Audit Success",User32,10,RemoteInteractive,1529310,Information,"host_1","user_133" "1477677715.000",,4624,"Audit Success",User32,10,RemoteInteractive,1529315,Information,"host_1","user_52" "1477680618.000",,4624,"Audit Success",User32,10,RemoteInteractive,1529334,Information,"host_1","user_106" "1477684613.000",,4624,"Audit Success",User32,10,RemoteInteractive,1529356,Information,"host_1","user_112" "1477685654.000",,4624,"Audit Success",User32,10,RemoteInteractive,1529366,Information,"host_1","user_146" "1477685733.000",,4624,"Audit Success",User32,10,RemoteInteractive,1529377,Information,"host_1","user_122" "1477688595.000",,4624,"Audit Success",User32,10,RemoteInteractive,1529397,Information,"host_1","user_51" "1477688814.000",,4624,"Audit Success",User32,10,RemoteInteractive,1529405,Information,"host_1","user_138" "1477689209.000",,4624,"Audit Success",User32,10,RemoteInteractive,1529420,Information,"host_1","user_146" "1477689519.000",,4624,"Audit Success",User32,10,RemoteInteractive,1529429,Information,"host_1","user_143" "1477691951.000",,4624,"Audit Success",User32,10,RemoteInteractive,1529468,Information,"host_1","user_138" "1477692498.000",,4624,"Audit Success",User32,10,RemoteInteractive,1529483,Information,"host_1","user_146" "1477692641.000",,4624,"Audit Success",User32,10,RemoteInteractive,1529494,Information,"host_1","user_138" "1477692831.000",,4624,"Audit Success",User32,10,RemoteInteractive,1529500,Information,"host_1","user_12" "1477692911.000",,4624,"Audit Success",User32,10,RemoteInteractive,1529504,Information,"host_1","user_30" "1477693178.000",,4624,"Audit Success",User32,10,RemoteInteractive,1529509,Information,"host_1","user_57" "1477696760.000",,4624,"Audit Success",User32,10,RemoteInteractive,1529541,Information,"host_1","user_51" "1477707695.000",,4624,"Audit Success",Advapi,2,Interactive,985891596,Information,"host_11","user_5" "1477707707.000",,4624,"Audit Success",User32,10,RemoteInteractive,985892654,Information,"host_11","user_74" "1477870193.000",,4624,"Audit Success",User32,10,RemoteInteractive,1530088,Information,"host_1","user_47" "1477911307.000",,4624,"Audit Success",User32,10,RemoteInteractive,1530203,Information,"host_1","user_39" "1477911315.000",,4624,"Audit Success",User32,10,RemoteInteractive,1530208,Information,"host_1","user_34" "1477912093.000",,4624,"Audit Success",User32,10,RemoteInteractive,1530219,Information,"host_1","user_39" "1477918733.000",,4624,"Audit Success",User32,10,RemoteInteractive,1530241,Information,"host_1","user_34" "1477919237.000",,4624,"Audit Success",User32,10,RemoteInteractive,1530248,Information,"host_1","svc_system_monitoring" "1477923014.000",,4624,"Audit Success",User32,10,RemoteInteractive,1530272,Information,"host_1","user_34" "1477931167.000",,4624,"Audit Success",User32,10,RemoteInteractive,1530301,Information,"host_1","user_112" "1477931919.000",,4624,"Audit Success",User32,10,RemoteInteractive,3285807,Information,"host_23","user_1" "1477932512.000",,4624,"Audit Success",User32,10,RemoteInteractive,1530310,Information,"host_1","user_16" "1477932618.000",,4624,"Audit Success",User32,10,RemoteInteractive,1530315,Information,"host_1","user_34" "1477932713.000",,4624,"Audit Success",User32,10,RemoteInteractive,1530321,Information,"host_1","user_31" "1477933373.000",,4624,"Audit Success",User32,10,RemoteInteractive,1530331,Information,"host_1","user_16" "1477933634.000",,4624,"Audit Success",User32,10,RemoteInteractive,1530340,Information,"host_1","user_143" "1477934532.000",,4624,"Audit Success",User32,10,RemoteInteractive,1530346,Information,"host_1","user_146" "1477935036.000",,4624,"Audit Success",User32,10,RemoteInteractive,1530350,Information,"host_1","user_12" "1477935859.000",,4624,"Audit Success",User32,10,RemoteInteractive,1530358,Information,"host_1","user_52" "1477937218.000",,4624,"Audit Success",User32,10,RemoteInteractive,1530377,Information,"host_1","user_34" "1477937572.000",,4624,"Audit Success",User32,10,RemoteInteractive,1530389,Information,"host_1","user_52" "1477938193.000",,4624,"Audit Success",User32,10,RemoteInteractive,1530395,Information,"host_1","user_94" "1477939646.000",,4624,"Audit Success",User32,10,RemoteInteractive,1530404,Information,"host_1","user_48" "1477943832.000",,4624,"Audit Success",User32,10,RemoteInteractive,1530443,Information,"host_1","user_12" "1477944036.000",,4624,"Audit Success",User32,10,RemoteInteractive,1530448,Information,"host_1","user_12" "1477944092.000",,4624,"Audit Success",User32,10,RemoteInteractive,1530457,Information,"host_1","user_30" "1477945502.000",,4624,"Audit Success",User32,10,RemoteInteractive,1530466,Information,"host_1","user_12" "1477946438.000",,4624,"Audit Success",User32,10,RemoteInteractive,1530484,Information,"host_1","user_53" "1477946473.000",,4624,"Audit Success",User32,10,RemoteInteractive,1530492,Information,"host_1","user_26" "1477946564.000",,4624,"Audit Success",User32,10,RemoteInteractive,1530502,Information,"host_1","user_104" "1477947383.000",,4624,"Audit Success",Advapi,2,Interactive,1002242601,Information,"host_11","user_5" "1477947387.000",,4624,"Audit Success",User32,10,RemoteInteractive,1002242982,Information,"host_11","user_74" "1477949146.000",,4624,"Audit Success",User32,10,RemoteInteractive,1530537,Information,"host_1","user_53" "1477949652.000",,4624,"Audit Success",User32,10,RemoteInteractive,1530547,Information,"host_1","user_12" "1477949866.000",,4624,"Audit Success",User32,10,RemoteInteractive,1530553,Information,"host_1","user_146" "1477952744.000",,4624,"Audit Success",User32,10,RemoteInteractive,1530567,Information,"host_1","user_16" "1477956279.000",,4624,"Audit Success",User32,10,RemoteInteractive,1530603,Information,"host_1","user_104" "1477957786.000",,4624,"Audit Success",User32,10,RemoteInteractive,1530624,Information,"host_1","user_48" "1477973122.000",,4624,"Audit Success",User32,10,RemoteInteractive,1530687,Information,"host_1","user_146" "1477996199.000",,4624,"Audit Success",User32,10,RemoteInteractive,1530769,Information,"host_1","user_34" "1477997462.000",,4624,"Audit Success",User32,10,RemoteInteractive,1530781,Information,"host_1","user_39" "1478009121.000",,4624,"Audit Success",User32,10,RemoteInteractive,1530822,Information,"host_1","user_39" "1478009438.000",,4624,"Audit Success",User32,10,RemoteInteractive,1530829,Information,"host_1","user_39" "1478011737.000",,4624,"Audit Success",User32,10,RemoteInteractive,1530840,Information,"host_1","user_39" "1478015828.000",,4624,"Audit Success",User32,10,RemoteInteractive,1530860,Information,"host_1","user_34" "1478017854.000",,4624,"Audit Success",User32,10,RemoteInteractive,1530871,Information,"host_1","user_39" "1478020278.000",,4624,"Audit Success",User32,10,RemoteInteractive,1530882,Information,"host_1","user_146" "1478020678.000",,4624,"Audit Success",User32,10,RemoteInteractive,1530890,Information,"host_1","user_52" "1478020815.000",,4624,"Audit Success",User32,10,RemoteInteractive,1530893,Information,"host_1","user_57" "1478021701.000",,4624,"Audit Success",User32,10,RemoteInteractive,1530898,Information,"host_1","user_143" "1478023084.000",,4624,"Audit Success",User32,10,RemoteInteractive,1530915,Information,"host_1","user_138" "1478023694.000",,4624,"Audit Success",Advapi,2,Interactive,1007521705,Information,"host_11","user_5" "1478023791.000",,4624,"Audit Success",User32,10,RemoteInteractive,1007529348,Information,"host_11","user_139" "1478024201.000",,4624,"Audit Success",User32,10,RemoteInteractive,1530931,Information,"host_1","user_94" "1478024910.000",,4624,"Audit Success",User32,10,RemoteInteractive,1530940,Information,"host_1","user_114" "1478024916.000",,4624,"Audit Success",User32,10,RemoteInteractive,1530943,Information,"host_1","user_70" "1478024979.000",,4624,"Audit Success",User32,10,RemoteInteractive,1530945,Information,"host_1","user_47" "1478026875.000",,4624,"Audit Success",User32,10,RemoteInteractive,1530963,Information,"host_1","user_143" "1478027425.000",,4624,"Audit Success",User32,10,RemoteInteractive,1530969,Information,"host_1","user_16" "1478027824.000",,4624,"Audit Success",User32,10,RemoteInteractive,1530976,Information,"host_1","user_22" "1478031532.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531012,Information,"host_1","user_26" "1478031841.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531016,Information,"host_1","user_12" "1478032185.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531024,Information,"host_1","user_146" "1478032918.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531040,Information,"host_1","user_122" "1478032960.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531044,Information,"host_1","user_114" "1478033313.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531049,Information,"host_1","user_52" "1478033797.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531054,Information,"host_1","user_41" "1478033851.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531059,Information,"host_1","user_112" "1478034747.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531071,Information,"host_1","user_30" "1478035587.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531078,Information,"host_1","user_86" "1478035855.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531082,Information,"host_1","user_94" "1478036058.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531087,Information,"host_1","user_22" "1478036154.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531099,Information,"host_1","user_22" "1478036173.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531104,Information,"host_1","user_146" "1478037604.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531122,Information,"host_1","user_53" "1478038303.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531133,Information,"host_1","user_70" "1478038630.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531138,Information,"host_1","user_12" "1478039965.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531163,Information,"host_1","user_70" "1478040016.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531168,Information,"host_1","user_70" "1478040139.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531173,Information,"host_1","user_71" "1478041286.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531183,Information,"host_1","user_71" "1478042881.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531202,Information,"host_1","user_82" "1478043872.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531212,Information,"host_1","user_104" "1478046149.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531227,Information,"host_1","user_16" "1478046377.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531237,Information,"host_1","user_30" "1478047495.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531254,Information,"host_1","user_146" "1478047570.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531260,Information,"host_1","user_104" "1478048046.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531269,Information,"host_1","user_104" "1478048420.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531278,Information,"host_1","user_104" "1478048517.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531291,Information,"host_1","user_146" "1478049577.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531309,Information,"host_1","user_22" "1478085096.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531450,Information,"host_1","user_34" "1478091941.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531475,Information,"host_1","user_39" "1478102361.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531509,Information,"host_1","user_16" "1478102466.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531517,Information,"host_1","user_26" "1478107358.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531539,Information,"host_1","user_146" "1478107518.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531545,Information,"host_1","user_48" "1478109528.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531561,Information,"host_1","user_112" "1478110091.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531570,Information,"host_1","user_146" "1478110630.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531578,Information,"host_1","user_51" "1478111984.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531590,Information,"host_1","user_133" "1478112195.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531596,Information,"host_1","user_26" "1478112636.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531602,Information,"host_1","user_86" "1478112881.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531606,Information,"host_1","user_26" "1478114424.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531632,Information,"host_1","user_26" "1478117993.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531653,Information,"host_1","user_143" "1478123120.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531688,Information,"host_1","user_138" "1478123687.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531696,Information,"host_1","user_26" "1478124107.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531705,Information,"host_1","user_71" "1478125091.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531712,Information,"host_1","user_70" "1478125143.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531719,Information,"host_1","user_71" "1478125327.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531725,Information,"host_1","user_71" "1478125527.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531729,Information,"host_1","user_121" "1478126827.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531737,Information,"host_1","user_51" "1478127330.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531747,Information,"host_1","user_86" "1478127815.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531755,Information,"host_1","user_138" "1478130614.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531773,Information,"host_1","user_48" "1478130970.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531780,Information,"host_1","user_146" "1478132250.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531810,Information,"host_1","user_146" "1478132292.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531820,Information,"host_1","user_30" "1478165185.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531941,Information,"host_1","user_39" "1478166172.000",,4624,"Audit Success",User32,10,RemoteInteractive,1531947,Information,"host_1","user_39" "1478184574.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532011,Information,"host_1","user_100" "1478188906.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532027,Information,"host_1","user_22" "1478190427.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532046,Information,"host_1","user_22" "1478192171.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532062,Information,"host_1","user_114" "1478193377.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532068,Information,"host_1","user_146" "1478193783.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532073,Information,"host_1","user_52" "1478194770.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532084,Information,"host_1","user_51" "1478196623.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532114,Information,"host_1","user_94" "1478196711.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532121,Information,"host_1","user_94" "1478196753.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532126,Information,"host_1","user_51" "1478196985.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532131,Information,"host_1","user_112" "1478197163.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532136,Information,"host_1","user_100" "1478197467.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532143,Information,"host_1","user_106" "1478197822.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532149,Information,"host_1","user_94" "1478197916.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532158,Information,"host_1","user_138" "1478198846.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532165,Information,"host_1","user_94" "1478199706.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532173,Information,"host_1","user_100" "1478199936.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532184,Information,"host_1","user_138" "1478201485.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532197,Information,"host_1","user_143" "1478203101.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532212,Information,"host_1","user_106" "1478203384.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532217,Information,"host_1","user_16" "1478203524.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532221,Information,"host_1","user_94" "1478204770.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532239,Information,"host_1","user_100" "1478204845.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532246,Information,"host_1","user_53" "1478205141.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532260,Information,"host_1","user_51" "1478205738.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532267,Information,"host_1","user_12" "1478206499.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532276,Information,"host_1","user_51" "1478208581.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532302,Information,"host_1","user_71" "1478211731.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532346,Information,"host_1","user_71" "1478211859.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532353,Information,"host_1","user_48" "1478212263.000",,4624,"Audit Success",Advapi,2,Interactive,1532359,Information,"host_1","user_143" "1478212265.000",,4624,"Audit Success",Advapi,2,Interactive,1532362,Information,"host_1","user_143" "1478212282.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532367,Information,"host_1","user_143" "1478214541.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532378,Information,"host_1","user_12" "1478215361.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532389,Information,"host_1","user_51" "1478215860.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532398,Information,"host_1","user_146" "1478216270.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532407,Information,"host_1","user_16" "1478216426.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532413,Information,"host_1","user_51" "1478219025.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532433,Information,"host_1","user_22" "1478219657.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532463,Information,"host_1","user_146" "1478219715.000",,4624,"Audit Success",User32,10,RemoteInteractive,3286739,Information,"host_23","user_1" "1478257943.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532597,Information,"host_1","user_39" "1478272812.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532644,Information,"host_1","user_12" "1478273319.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532652,Information,"host_1","user_12" "1478278503.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532671,Information,"host_1","user_16" "1478279875.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532684,Information,"host_1","user_106" "1478281494.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532698,Information,"host_1","user_112" "1478282634.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532702,Information,"host_1","user_52" "1478282999.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532716,Information,"host_1","user_52" "1478283271.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532720,Information,"host_1","user_114" "1478283329.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532723,Information,"host_1","user_71" "1478286945.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532742,Information,"host_1","user_22" "1478287257.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532746,Information,"host_1","user_106" "1478287480.000",,4624,"Audit Success",Advapi,2,Interactive,1023487095,Information,"host_11","user_5" "1478287490.000",,4624,"Audit Success",User32,10,RemoteInteractive,1023487777,Information,"host_11","user_74" "1478287753.000",,4624,"Audit Success",User32,10,RemoteInteractive,2628917,Information,"host_25","user_146" "1478287763.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532762,Information,"host_1","user_22" "1478288527.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532776,Information,"host_1","user_26" "1478288581.000",,4624,"Audit Success",User32,10,RemoteInteractive,2710140,Information,"host_26","user_146" "1478291565.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532794,Information,"host_1","user_52" "1478294496.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532817,Information,"host_1","user_113" "1478294653.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532823,Information,"host_1","user_41" "1478294697.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532827,Information,"host_1","user_106" "1478296660.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532839,Information,"host_1","user_26" "1478296784.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532854,Information,"host_1","user_138" "1478297727.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532861,Information,"host_1","user_122" "1478299120.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532872,Information,"host_1","user_53" "1478301116.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532899,Information,"host_1","user_106" "1478301289.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532905,Information,"host_1","user_16" "1478301395.000",,4624,"Audit Success",User32,10,RemoteInteractive,1532910,Information,"host_1","user_51" "1478368657.000",,4624,"Audit Success",User32,10,RemoteInteractive,1533130,Information,"host_1","user_138" "1478388289.000",,4624,"Audit Success",User32,10,RemoteInteractive,1533231,Information,"host_1","user_138" "1478536299.000",,4624,"Audit Success",User32,10,RemoteInteractive,1533642,Information,"host_1","user_39" "1478538419.000",,4624,"Audit Success",User32,10,RemoteInteractive,1533658,Information,"host_1","user_16" "1478539470.000",,4624,"Audit Success",User32,10,RemoteInteractive,1533672,Information,"host_1","user_26" "1478540980.000",,4624,"Audit Success",User32,10,RemoteInteractive,1533686,Information,"host_1","user_106" "1478541061.000",,4624,"Audit Success",User32,10,RemoteInteractive,1533694,Information,"host_1","user_146" "1478541944.000",,4624,"Audit Success",User32,10,RemoteInteractive,1533705,Information,"host_1","user_52" "1478542187.000",,4624,"Audit Success",User32,10,RemoteInteractive,1533714,Information,"host_1","user_12" "1478542270.000",,4624,"Audit Success",User32,10,RemoteInteractive,1533719,Information,"host_1","user_12" "1478543394.000",,4624,"Audit Success",User32,10,RemoteInteractive,1533730,Information,"host_1","user_138" "1478544702.000",,4624,"Audit Success",User32,10,RemoteInteractive,1533747,Information,"host_1","user_16" "1478545904.000",,4624,"Audit Success",User32,10,RemoteInteractive,1533758,Information,"host_1","user_16" "1478546530.000",,4624,"Audit Success",User32,10,RemoteInteractive,1533763,Information,"host_1","user_138" "1478548298.000",,4624,"Audit Success",User32,10,RemoteInteractive,1533779,Information,"host_1","user_106" "1478548504.000",,4624,"Audit Success",User32,10,RemoteInteractive,1533786,Information,"host_1","user_53" "1478550206.000",,4624,"Audit Success",User32,10,RemoteInteractive,1533804,Information,"host_1","user_104" "1478550441.000",,4624,"Audit Success",User32,10,RemoteInteractive,1533810,Information,"host_1","user_26" "1478550711.000",,4624,"Audit Success",User32,10,RemoteInteractive,1533817,Information,"host_1","user_26" "1478551313.000",,4624,"Audit Success",User32,10,RemoteInteractive,1533826,Information,"host_1","user_48" "1478551657.000",,4624,"Audit Success",User32,10,RemoteInteractive,1533836,Information,"host_1","user_86" "1478552591.000",,4624,"Audit Success",User32,10,RemoteInteractive,1533846,Information,"host_1","user_52" "1478553656.000",,4624,"Audit Success",User32,10,RemoteInteractive,1533862,Information,"host_1","user_16" "1478554318.000",,4624,"Audit Success",User32,10,RemoteInteractive,1533868,Information,"host_1","user_51" "1478554509.000",,4624,"Audit Success",User32,10,RemoteInteractive,1533878,Information,"host_1","user_51" "1478555562.000",,4624,"Audit Success",User32,10,RemoteInteractive,1533887,Information,"host_1","user_12" "1478558845.000",,4624,"Audit Success",Advapi,2,Interactive,1038333442,Information,"host_11","user_5" "1478558873.000",,4624,"Audit Success",User32,10,RemoteInteractive,1038335144,Information,"host_11","user_98" "1478559093.000",,4624,"Audit Success",User32,10,RemoteInteractive,1533911,Information,"host_1","user_138" "1478559146.000",,4624,"Audit Success",User32,10,RemoteInteractive,1533917,Information,"host_1","user_16" "1478559521.000",,4624,"Audit Success",User32,10,RemoteInteractive,1533930,Information,"host_1","user_52" "1478559820.000",,4624,"Audit Success",User32,10,RemoteInteractive,1533938,Information,"host_1","user_41" "1478559997.000",,4624,"Audit Success",User32,10,RemoteInteractive,1533943,Information,"host_1","user_138" "1478560631.000",,4624,"Audit Success",User32,10,RemoteInteractive,1533957,Information,"host_1","user_16" "1478561387.000",,4624,"Audit Success",User32,10,RemoteInteractive,1533965,Information,"host_1","user_104" "1478561681.000",,4624,"Audit Success",User32,10,RemoteInteractive,1533972,Information,"host_1","user_125" "1478562021.000",,4624,"Audit Success",User32,10,RemoteInteractive,1533975,Information,"host_1","user_71" "1478562023.000",,4624,"Audit Success",Advapi,2,Interactive,1038559001,Information,"host_11","user_6" "1478562025.000",,4624,"Audit Success",User32,10,RemoteInteractive,1038559103,Information,"host_11","user_107" "1478562119.000",,4624,"Audit Success",User32,10,RemoteInteractive,1533983,Information,"host_1","user_143" "1478562492.000",,4624,"Audit Success",User32,10,RemoteInteractive,1533994,Information,"host_1","user_63" "1478563664.000",,4624,"Audit Success",User32,10,RemoteInteractive,1534017,Information,"host_1","user_112" "1478564521.000",,4624,"Audit Success",User32,10,RemoteInteractive,1534023,Information,"host_1","user_104" "1478564880.000",,4624,"Audit Success",User32,10,RemoteInteractive,1534030,Information,"host_1","user_22" "1478565448.000",,4624,"Audit Success",User32,10,RemoteInteractive,1534041,Information,"host_1","user_31" "1478565942.000",,4624,"Audit Success",User32,10,RemoteInteractive,1534052,Information,"host_1","user_30" "1478567719.000",,4624,"Audit Success",User32,10,RemoteInteractive,1534074,Information,"host_1","user_22" "1478568938.000",,4624,"Audit Success",User32,10,RemoteInteractive,1534082,Information,"host_1","user_104" "1478600338.000",,4624,"Audit Success",User32,10,RemoteInteractive,1534214,Information,"host_1","user_39" "1478602648.000",,4624,"Audit Success",User32,10,RemoteInteractive,1534226,Information,"host_1","user_39" "1478623078.000",,4624,"Audit Success",User32,10,RemoteInteractive,1534289,Information,"host_1","user_114" "1478627649.000",,4624,"Audit Success",User32,10,RemoteInteractive,1534311,Information,"host_1","user_12" "1478627674.000",,4624,"Audit Success",User32,10,RemoteInteractive,1534314,Information,"host_1","user_143" "1478627943.000",,4624,"Audit Success",User32,10,RemoteInteractive,1534319,Information,"host_1","user_112" "1478628565.000",,4624,"Audit Success",User32,10,RemoteInteractive,1534328,Information,"host_1","user_122" "1478628709.000",,4624,"Audit Success",User32,10,RemoteInteractive,1534332,Information,"host_1","user_52" "1478628861.000",,4624,"Audit Success",User32,10,RemoteInteractive,1534336,Information,"host_1","user_146" "1478628967.000",,4624,"Audit Success",User32,10,RemoteInteractive,1534340,Information,"host_1","user_143" "1478629109.000",,4624,"Audit Success",User32,10,RemoteInteractive,1534349,Information,"host_1","user_26" "1478633114.000",,4624,"Audit Success",User32,10,RemoteInteractive,1534404,Information,"host_1","user_16" "1478634570.000",,4624,"Audit Success",User32,10,RemoteInteractive,1534428,Information,"host_1","user_47" "1478634637.000",,4624,"Audit Success",User32,10,RemoteInteractive,1534433,Information,"host_1","user_71" "1478636171.000",,4624,"Audit Success",User32,10,RemoteInteractive,1534443,Information,"host_1","user_94" "1478636703.000",,4624,"Audit Success",User32,10,RemoteInteractive,335235,Information,"host_22","user_47" "1478637504.000",,4624,"Audit Success",User32,10,RemoteInteractive,1534458,Information,"host_1","user_16" "1478639105.000",,4624,"Audit Success",User32,10,RemoteInteractive,1534472,Information,"host_1","user_146" "1478640395.000",,4624,"Audit Success",User32,10,RemoteInteractive,391903,Information,"host_24","user_47" "1478640670.000",,4624,"Audit Success",User32,10,RemoteInteractive,1534492,Information,"host_1","user_12" "1478640867.000",,4624,"Audit Success",User32,10,RemoteInteractive,1534501,Information,"host_1","user_30" "1478642272.000",,4624,"Audit Success",User32,10,RemoteInteractive,1534523,Information,"host_1","user_51" "1478643851.000",,4624,"Audit Success",User32,10,RemoteInteractive,1534535,Information,"host_1","user_12" "1478644911.000",,4624,"Audit Success",Advapi,2,Interactive,210328232,Information,"host_2","user_4" "1478644919.000",,4624,"Audit Success",User32,10,RemoteInteractive,210328333,Information,"host_2","user_58" "1478644970.000",,4624,"Audit Success",User32,10,RemoteInteractive,1534556,Information,"host_1","user_106" "1478646224.000",,4624,"Audit Success",Advapi,2,Interactive,171872986,Information,"host_3","user_4" "1478646227.000",,4624,"Audit Success",User32,10,RemoteInteractive,171873002,Information,"host_3","user_58" "1478646578.000",,4624,"Audit Success",User32,10,RemoteInteractive,1534575,Information,"host_1","user_133" "1478648282.000",,4624,"Audit Success",User32,10,RemoteInteractive,1534591,Information,"host_1","user_104" "1478649419.000",,4624,"Audit Success",User32,10,RemoteInteractive,1534601,Information,"host_1","user_30" "1478649854.000",,4624,"Audit Success",User32,10,RemoteInteractive,1534610,Information,"host_1","user_22" "1478651469.000",,4624,"Audit Success",User32,10,RemoteInteractive,1534643,Information,"host_1","user_51" "1478651982.000",,4624,"Audit Success",User32,10,RemoteInteractive,1534650,Information,"host_1","user_71" "1478652073.000",,4624,"Audit Success",User32,10,RemoteInteractive,1534655,Information,"host_1","user_16" "1478654534.000",,4624,"Audit Success",User32,10,RemoteInteractive,1534674,Information,"host_1","user_53" "1478654691.000",,4624,"Audit Success",User32,10,RemoteInteractive,1534679,Information,"host_1","user_104" "1478654900.000",,4624,"Audit Success",User32,10,RemoteInteractive,1534686,Information,"host_1","user_47" "1478655606.000",,4624,"Audit Success",User32,10,RemoteInteractive,1534996,Information,"host_1","user_52" "1478656096.000",,4624,"Audit Success",User32,10,RemoteInteractive,1535002,Information,"host_1","user_47" "1478681518.000",,4624,"Audit Success",User32,10,RemoteInteractive,1535087,Information,"host_1","user_41" "1478687679.000",,4624,"Audit Success",User32,10,RemoteInteractive,1535112,Information,"host_1","user_34" "1478690183.000",,4624,"Audit Success",User32,10,RemoteInteractive,1535148,Information,"host_1","user_34" "1478696433.000",,4624,"Audit Success",Advapi,2,Interactive,1048441270,Information,"host_11","user_7" "1478696466.000",,4624,"Audit Success",User32,10,RemoteInteractive,1048443137,Information,"host_11","user_62" "1478696551.000",,4624,"Audit Success",Advapi,2,Interactive,1048448488,Information,"host_11","user_7" "1478696553.000",,4624,"Audit Success",User32,10,RemoteInteractive,1048448564,Information,"host_11","user_62" "1478712478.000",,4624,"Audit Success",User32,10,RemoteInteractive,1535218,Information,"host_1","user_16" "1478712856.000",,4624,"Audit Success",User32,10,RemoteInteractive,1535223,Information,"host_1","user_122" "1478714722.000",,4624,"Audit Success",User32,10,RemoteInteractive,1535240,Information,"host_1","user_12" "1478715055.000",,4624,"Audit Success",User32,10,RemoteInteractive,1535244,Information,"host_1","user_52" "1478715275.000",,4624,"Audit Success",User32,10,RemoteInteractive,1535247,Information,"host_1","user_106" "1478715625.000",,4624,"Audit Success",User32,10,RemoteInteractive,1535250,Information,"host_1","user_71" "1478715905.000",,4624,"Audit Success",User32,10,RemoteInteractive,1535257,Information,"host_1","user_138" "1478716058.000",,4624,"Audit Success",User32,10,RemoteInteractive,1535262,Information,"host_1","user_51" "1478716517.000",,4624,"Audit Success",User32,10,RemoteInteractive,1535275,Information,"host_1","user_143" "1478716908.000",,4624,"Audit Success",User32,10,RemoteInteractive,1535280,Information,"host_1","user_51" "1478718037.000",,4624,"Audit Success",User32,10,RemoteInteractive,1535292,Information,"host_1","user_26" "1478718077.000",,4624,"Audit Success",User32,10,RemoteInteractive,1535296,Information,"host_1","user_71" "1478718223.000",,4624,"Audit Success",User32,10,RemoteInteractive,1535303,Information,"host_1","user_146" "1478718858.000",,4624,"Audit Success",User32,10,RemoteInteractive,1535323,Information,"host_1","user_86" "1478719490.000",,4624,"Audit Success",User32,10,RemoteInteractive,1535337,Information,"host_1","user_66" "1478722586.000",,4624,"Audit Success",User32,10,RemoteInteractive,1535374,Information,"host_1","user_30" "1478723297.000",,4624,"Audit Success",User32,10,RemoteInteractive,1535379,Information,"host_1","user_41" "1478725292.000",,4624,"Audit Success",User32,10,RemoteInteractive,1535401,Information,"host_1","user_106" "1478725294.000",,4624,"Audit Success",User32,10,RemoteInteractive,1535405,Information,"host_1","user_51" "1478726232.000",,4624,"Audit Success",User32,10,RemoteInteractive,1535423,Information,"host_1","user_47" "1478728970.000",,4624,"Audit Success",User32,10,RemoteInteractive,1535436,Information,"host_1","user_53" "1478729758.000",,4624,"Audit Success",User32,10,RemoteInteractive,1535443,Information,"host_1","user_22" "1478729858.000",,4624,"Audit Success",User32,10,RemoteInteractive,1535450,Information,"host_1","user_71" "1478730283.000",,4624,"Audit Success",User32,10,RemoteInteractive,1535459,Information,"host_1","user_100" "1478730863.000",,4624,"Audit Success",User32,10,RemoteInteractive,1535467,Information,"host_1","user_22" "1478731531.000",,4624,"Audit Success",User32,10,RemoteInteractive,1535478,Information,"host_1","user_30" "1478732563.000",,4624,"Audit Success",User32,10,RemoteInteractive,1535493,Information,"host_1","user_12" "1478734848.000",,4624,"Audit Success",User32,10,RemoteInteractive,1535503,Information,"host_1","user_112" "1478735848.000",,4624,"Audit Success",User32,10,RemoteInteractive,1535508,Information,"host_1","user_52" "1478736482.000",,4624,"Audit Success",User32,10,RemoteInteractive,1535520,Information,"host_1","user_30" "1478739365.000",,4624,"Audit Success",User32,10,RemoteInteractive,1535534,Information,"host_1","user_51" "1478749706.000",,4624,"Audit Success",User32,10,RemoteInteractive,1535583,Information,"host_1","user_100" "1478750069.000",,4624,"Audit Success",User32,10,RemoteInteractive,1535593,Information,"host_1","user_100" "1478770216.000",,4624,"Audit Success",Advapi,2,Interactive,1052746649,Information,"host_11","user_8" "1478770219.000",,4624,"Audit Success",User32,10,RemoteInteractive,1052746807,Information,"host_11","user_62" "1478783121.000",,4624,"Audit Success",User32,10,RemoteInteractive,1535721,Information,"host_1","user_34" "1478783134.000",,4624,"Audit Success",User32,10,RemoteInteractive,1540466852,Information,"host_9","user_120" "1478784024.000",,4624,"Audit Success",User32,10,RemoteInteractive,1293571482,Information,"host_10","user_120" "1478784260.000",,4624,"Audit Success",seclogo,2,Interactive,1293578892,Information,"host_10","user_120" "1478784532.000",,4624,"Audit Success",User32,10,RemoteInteractive,1293585807,Information,"host_10","user_140" "1478790903.000",,4624,"Audit Success",User32,10,RemoteInteractive,1535746,Information,"host_1","user_34" "1478795331.000",,4624,"Audit Success",User32,10,RemoteInteractive,1535761,Information,"host_1","user_12" "1478799992.000",,4624,"Audit Success",User32,10,RemoteInteractive,1535786,Information,"host_1","user_146" "1478800719.000",,4624,"Audit Success",User32,10,RemoteInteractive,1535796,Information,"host_1","user_16" "1478800850.000",,4624,"Audit Success",User32,10,RemoteInteractive,1535802,Information,"host_1","user_82" "1478801182.000",,4624,"Audit Success",User32,10,RemoteInteractive,1535811,Information,"host_1","user_16" "1478801685.000",,4624,"Audit Success",User32,10,RemoteInteractive,1535815,Information,"host_1","user_52" "1478802084.000",,4624,"Audit Success",User32,10,RemoteInteractive,1535819,Information,"host_1","user_112" "1478803816.000",,4624,"Audit Success",User32,10,RemoteInteractive,1535835,Information,"host_1","user_146" "1478809495.000",,4624,"Audit Success",User32,10,RemoteInteractive,1535872,Information,"host_1","user_41" "1478810292.000",,4624,"Audit Success",User32,10,RemoteInteractive,1535883,Information,"host_1","user_22" "1478814724.000",,4624,"Audit Success",User32,10,RemoteInteractive,1535939,Information,"host_1","user_30" "1478815558.000",,4624,"Audit Success",User32,10,RemoteInteractive,1535947,Information,"host_1","user_133" "1478815996.000",,4624,"Audit Success",User32,10,RemoteInteractive,1535955,Information,"host_1","user_16" "1478816209.000",,4624,"Audit Success",User32,10,RemoteInteractive,1535961,Information,"host_1","user_106" "1478818461.000",,4624,"Audit Success",User32,10,RemoteInteractive,1535980,Information,"host_1","user_51" "1478819017.000",,4624,"Audit Success",User32,10,RemoteInteractive,1535986,Information,"host_1","user_146" "1478819108.000",,4624,"Audit Success",User32,10,RemoteInteractive,1535999,Information,"host_1","user_146" "1478819792.000",,4624,"Audit Success",User32,10,RemoteInteractive,1536009,Information,"host_1","user_53" "1478822542.000",,4624,"Audit Success",User32,10,RemoteInteractive,1536030,Information,"host_1","user_12" "1478823567.000",,4624,"Audit Success",User32,10,RemoteInteractive,1536036,Information,"host_1","user_31" "1478826663.000",,4624,"Audit Success",User32,10,RemoteInteractive,1536067,Information,"host_1","user_48" "1478826961.000",,4624,"Audit Success",User32,10,RemoteInteractive,1536075,Information,"host_1","user_138" "1478836701.000",,4624,"Audit Success",User32,10,RemoteInteractive,1536115,Information,"host_1","user_146" "1478838674.000",,4624,"Audit Success",User32,10,RemoteInteractive,1536128,Information,"host_1","user_48" "1478840009.000",,4624,"Audit Success",User32,10,RemoteInteractive,1536137,Information,"host_1","user_48" "1478848333.000",,4624,"Audit Success",Advapi,2,Interactive,3035892848,Information,"host_5","user_4" "1478848336.000",,4624,"Audit Success",User32,10,RemoteInteractive,3035893130,Information,"host_5","user_97" "1478848443.000",,4624,"Audit Success",Advapi,2,Interactive,211844667,Information,"host_2","user_5" "1478848444.000",,4624,"Audit Success",Advapi,2,Interactive,172647956,Information,"host_3","user_5" "1478848446.000",,4624,"Audit Success",Advapi,2,Interactive,194942280,Information,"host_7","user_5" "1478848447.000",,4624,"Audit Success",Advapi,2,Interactive,128050926,Information,"host_4","user_5" "1478848451.000",,4624,"Audit Success",User32,10,RemoteInteractive,128050933,Information,"host_4","user_97" "1478848469.000",,4624,"Audit Success",User32,10,RemoteInteractive,211844731,Information,"host_2","user_97" "1478848497.000",,4624,"Audit Success",User32,10,RemoteInteractive,172648066,Information,"host_3","user_97" "1478856921.000",,4624,"Audit Success",Advapi,2,Interactive,128071661,Information,"host_4","user_2" "1478857600.000",,4624,"Audit Success",Advapi,2,Interactive,128073815,Information,"host_4","user_3" "1478857687.000",,4624,"Audit Success",User32,10,RemoteInteractive,128073904,Information,"host_4","user_97" "1478857698.000",,4624,"Audit Success",Advapi,2,Interactive,3035955876,Information,"host_5","user_2" "1478857822.000",,4624,"Audit Success",Advapi,2,Interactive,3035956905,Information,"host_5","user_3" "1478859003.000",,4624,"Audit Success",Advapi,2,Interactive,3035962847,Information,"host_5","user_3" "1478859028.000",,4624,"Audit Success",Advapi,2,Interactive,3035962908,Information,"host_5","user_3" "1478859030.000",,4624,"Audit Success",User32,10,RemoteInteractive,3035962914,Information,"host_5","user_97" "1478860023.000",,4624,"Audit Success",Advapi,2,Interactive,1057333092,Information,"host_11","user_8" "1478860027.000",,4624,"Audit Success",User32,10,RemoteInteractive,1057333314,Information,"host_11","user_97" "1478861673.000",,4624,"Audit Success",User32,10,RemoteInteractive,1536221,Information,"host_1","user_34" "1478863635.000",,4624,"Audit Success",User32,10,RemoteInteractive,1536231,Information,"host_1","user_34" "1478865903.000",,4624,"Audit Success",Advapi,2,Interactive,211977449,Information,"host_2","user_5" "1478865906.000",,4624,"Audit Success",User32,10,RemoteInteractive,211977457,Information,"host_2","user_97" "1478873756.000",,4624,"Audit Success",User32,10,RemoteInteractive,1536266,Information,"host_1","user_133" "1478880610.000",,4624,"Audit Success",User32,10,RemoteInteractive,1536286,Information,"host_1","user_122" "1478880846.000",,4624,"Audit Success",User32,10,RemoteInteractive,1536293,Information,"host_1","user_82" "1478881415.000",,4624,"Audit Success",User32,10,RemoteInteractive,1536307,Information,"host_1","user_39" "1478884835.000",,4624,"Audit Success",User32,10,RemoteInteractive,1536328,Information,"host_1","user_122" "1478885395.000",,4624,"Audit Success",User32,10,RemoteInteractive,1536339,Information,"host_1","user_52" "1478886255.000",,4624,"Audit Success",User32,10,RemoteInteractive,1536349,Information,"host_1","user_106" "1478887744.000",,4624,"Audit Success",User32,10,RemoteInteractive,1536358,Information,"host_1","user_146" "1478888080.000",,4624,"Audit Success",Advapi,2,Interactive,128113102,Information,"host_4","user_4" "1478888084.000",,4624,"Audit Success",User32,10,RemoteInteractive,128113114,Information,"host_4","user_56" "1478888145.000",,4624,"Audit Success",User32,10,RemoteInteractive,1536363,Information,"host_1","user_100" "1478889122.000",,4624,"Audit Success",User32,10,RemoteInteractive,1536377,Information,"host_1","user_106" "1478889183.000",,4624,"Audit Success",User32,10,RemoteInteractive,1536382,Information,"host_1","user_16" "1478890850.000",,4624,"Audit Success",User32,10,RemoteInteractive,1536404,Information,"host_1","user_104" "1478891033.000",,4624,"Audit Success",User32,10,RemoteInteractive,1536411,Information,"host_1","user_41" "1478891944.000",,4624,"Audit Success",User32,10,RemoteInteractive,1536416,Information,"host_1","user_51" "1478892145.000",,4624,"Audit Success",User32,10,RemoteInteractive,1536421,Information,"host_1","user_82" "1478892167.000",,4624,"Audit Success",User32,10,RemoteInteractive,1536426,Information,"host_1","user_122" "1478892737.000",,4624,"Audit Success",User32,10,RemoteInteractive,1536444,Information,"host_1","user_122" "1478894342.000",,4624,"Audit Success",User32,10,RemoteInteractive,1536474,Information,"host_1","user_104" "1478896330.000",,4624,"Audit Success",User32,10,RemoteInteractive,1536499,Information,"host_1","user_104" "1478899010.000",,4624,"Audit Success",User32,10,RemoteInteractive,1536527,Information,"host_1","user_146" "1478901108.000",,4624,"Audit Success",User32,10,RemoteInteractive,1536549,Information,"host_1","user_30" "1478902420.000",,4624,"Audit Success",User32,10,RemoteInteractive,1536568,Information,"host_1","user_16" "1478902679.000",,4624,"Audit Success",User32,10,RemoteInteractive,1536580,Information,"host_1","user_30" "1478906458.000",,4624,"Audit Success",User32,10,RemoteInteractive,1536611,Information,"host_1","user_51" "1478907118.000",,4624,"Audit Success",Advapi,2,Interactive,3049580632,Information,"host_5","user_4" "1478907119.000",,4624,"Audit Success",User32,10,RemoteInteractive,3049581069,Information,"host_5","user_58" "1478908955.000",,4624,"Audit Success",User32,10,RemoteInteractive,4717631131,Information,"host_6","user_58" "1478909418.000",,4624,"Audit Success",User32,10,RemoteInteractive,1536639,Information,"host_1","user_112" "1478931858.000",,4624,"Audit Success",User32,10,RemoteInteractive,1536726,Information,"host_1","user_100" "1479081639.000",,4624,"Audit Success",User32,10,RemoteInteractive,1537192,Information,"host_1","user_142" "1479081780.000",,4624,"Audit Success",User32,10,RemoteInteractive,1537195,Information,"host_1","user_142" "1479082062.000",,4624,"Audit Success",User32,10,RemoteInteractive,1537199,Information,"host_1","user_142" "1479082470.000",,4624,"Audit Success",User32,10,RemoteInteractive,1537208,Information,"host_1","user_146" "1479083951.000",,4624,"Audit Success",User32,10,RemoteInteractive,1537224,Information,"host_1","user_146" "1479093697.000",,4624,"Audit Success",User32,10,RemoteInteractive,1537269,Information,"host_1","user_100" "1479098527.000",,4624,"Audit Success",User32,10,RemoteInteractive,1537290,Information,"host_1","user_22" "1479104856.000",,4624,"Audit Success",Advapi,2,Interactive,1068731427,Information,"host_11","user_8" "1479105181.000",,4624,"Audit Success",Advapi,2,Interactive,1068752979,Information,"host_11","user_8" "1479105184.000",,4624,"Audit Success",Advapi,2,Interactive,1051163365,Information,"host_12","user_4" "1479105191.000",,4624,"Audit Success",User32,10,RemoteInteractive,1051163663,Information,"host_12","user_97" "1479105195.000",,4624,"Audit Success",User32,10,RemoteInteractive,1068753979,Information,"host_11","user_97" "1479105689.000",,4624,"Audit Success",Advapi,2,Interactive,1068775608,Information,"host_11","user_2" "1479105871.000",,4624,"Audit Success",Advapi,2,Interactive,1068776616,Information,"host_11","user_3" "1479105920.000",,4624,"Audit Success",User32,10,RemoteInteractive,1068776689,Information,"host_11","user_97" "1479106130.000",,4624,"Audit Success",Advapi,2,Interactive,196446971,Information,"host_7","user_5" "1479106132.000",,4624,"Audit Success",User32,10,RemoteInteractive,196446976,Information,"host_7","user_97" "1479108496.000",,4624,"Audit Success",Advapi,2,Interactive,1068781431,Information,"host_11","user_2" "1479108675.000",,4624,"Audit Success",Advapi,2,Interactive,1068782371,Information,"host_11","user_3" "1479108677.000",,4624,"Audit Success",User32,10,RemoteInteractive,1068782382,Information,"host_11","user_97" "1479111923.000",,4624,"Audit Success",Advapi,2,Interactive,1068788737,Information,"host_11","user_2" "1479112053.000",,4624,"Audit Success",Advapi,2,Interactive,1068789678,Information,"host_11","user_3" "1479112055.000",,4624,"Audit Success",User32,10,RemoteInteractive,1068789685,Information,"host_11","user_97" "1479113930.000",,4624,"Audit Success",Advapi,2,Interactive,196471631,Information,"host_7","user_2" "1479116454.000",,4624,"Audit Success",Advapi,2,Interactive,196490226,Information,"host_7","user_3" "1479116456.000",,4624,"Audit Success",User32,10,RemoteInteractive,196490245,Information,"host_7","user_97" "1479116484.000",,4624,"Audit Success",Advapi,2,Interactive,1051961886,Information,"host_12","user_2" "1479116594.000",,4624,"Audit Success",Advapi,2,Interactive,1051962699,Information,"host_12","user_3" "1479116643.000",,4624,"Audit Success",User32,10,RemoteInteractive,1051962787,Information,"host_12","user_97" "1479126646.000",,4624,"Audit Success",User32,10,RemoteInteractive,1551211751,Information,"host_9","user_97" "1479131129.000",,4624,"Audit Success",User32,10,RemoteInteractive,1537388,Information,"host_1","user_88" "1479132023.000",,4624,"Audit Success",User32,10,RemoteInteractive,1537395,Information,"host_1","user_39" "1479142428.000",,4624,"Audit Success",User32,10,RemoteInteractive,1537435,Information,"host_1","user_39" "1479142758.000",,4624,"Audit Success",User32,10,RemoteInteractive,1537443,Information,"host_1","user_122" "1479143679.000",,4624,"Audit Success",User32,10,RemoteInteractive,1537451,Information,"host_1","user_71" "1479143698.000",,4624,"Audit Success",User32,10,RemoteInteractive,1537456,Information,"host_1","user_81" "1479143798.000",,4624,"Audit Success",User32,10,RemoteInteractive,1552876615,Information,"host_9","user_141" "1479144249.000",,4624,"Audit Success",Advapi,2,Interactive,1071049307,Information,"host_11","user_3" "1479144251.000",,4624,"Audit Success",User32,10,RemoteInteractive,1071049639,Information,"host_11","user_141" "1479145323.000",,4624,"Audit Success",User32,10,RemoteInteractive,1537471,Information,"host_1","user_12" "1479145419.000",,4624,"Audit Success",User32,10,RemoteInteractive,1537475,Information,"host_1","user_106" "1479145632.000",,4624,"Audit Success",Advapi,2,Interactive,1071223749,Information,"host_11","user_4" "1479145642.000",,4624,"Audit Success",User32,10,RemoteInteractive,1071224364,Information,"host_11","user_74" "1479145799.000",,4624,"Audit Success",User32,10,RemoteInteractive,1537482,Information,"host_1","user_112" "1479145961.000",,4624,"Audit Success",Advapi,2,Interactive,1071246731,Information,"host_11","user_3" "1479145963.000",,4624,"Audit Success",User32,10,RemoteInteractive,1071246904,Information,"host_11","user_141" "1479146081.000",,4624,"Audit Success",User32,10,RemoteInteractive,1537486,Information,"host_1","user_12" "1479146822.000",,4624,"Audit Success",User32,10,RemoteInteractive,1537499,Information,"host_1","user_146" "1479146878.000",,4624,"Audit Success",User32,10,RemoteInteractive,1537504,Information,"host_1","user_31" "1479147696.000",,4624,"Audit Success",User32,10,RemoteInteractive,1537509,Information,"host_1","user_12" "1479147728.000",,4624,"Audit Success",User32,10,RemoteInteractive,1537515,Information,"host_1","user_52" "1479147832.000",,4624,"Audit Success",User32,10,RemoteInteractive,1537519,Information,"host_1","user_100" "1479148347.000",,4624,"Audit Success",User32,10,RemoteInteractive,1537527,Information,"host_1","user_133" "1479148772.000",,4624,"Audit Success",Advapi,2,Interactive,1537541,Information,"host_1","user_115" "1479148773.000",,4624,"Audit Success",Advapi,2,Interactive,1537543,Information,"host_1","user_115" "1479148776.000",,4624,"Audit Success",User32,10,RemoteInteractive,1537546,Information,"host_1","user_115" "1479149903.000",,4624,"Audit Success",User32,10,RemoteInteractive,1537565,Information,"host_1","user_86" "1479150227.000",,4624,"Audit Success",User32,10,RemoteInteractive,1537575,Information,"host_1","user_48" "1479150233.000",,4624,"Audit Success",User32,10,RemoteInteractive,1537577,Information,"host_1","user_142" "1479150273.000",,4624,"Audit Success",User32,10,RemoteInteractive,1537580,Information,"host_1","user_113" "1479150474.000",,4624,"Audit Success",User32,10,RemoteInteractive,1537590,Information,"host_1","user_51" "1479151194.000",,4624,"Audit Success",User32,10,RemoteInteractive,1537606,Information,"host_1","user_31" "1479151805.000",,4624,"Audit Success",User32,10,RemoteInteractive,1537618,Information,"host_1","user_53" "1479155036.000",,4624,"Audit Success",User32,10,RemoteInteractive,1537638,Information,"host_1","user_51" "1479155904.000",,4624,"Audit Success",User32,10,RemoteInteractive,1537653,Information,"host_1","user_30" "1479157574.000",,4624,"Audit Success",Advapi,2,Interactive,1072131308,Information,"host_11","user_4" "1479157582.000",,4624,"Audit Success",User32,10,RemoteInteractive,1072132075,Information,"host_11","user_74" "1479159209.000",,4624,"Audit Success",User32,10,RemoteInteractive,1537688,Information,"host_1","user_122" "1479159431.000",,4624,"Audit Success",User32,10,RemoteInteractive,1537697,Information,"host_1","user_51" "1479160259.000",,4624,"Audit Success",User32,10,RemoteInteractive,1537711,Information,"host_1","user_138" "1479160641.000",,4624,"Audit Success",User32,10,RemoteInteractive,1537722,Information,"host_1","user_57" "1479160691.000",,4624,"Audit Success",User32,10,RemoteInteractive,1537726,Information,"host_1","user_138" "1479160714.000",,4624,"Audit Success",User32,10,RemoteInteractive,1537732,Information,"host_1","user_138" "1479160749.000",,4624,"Audit Success",User32,10,RemoteInteractive,1537739,Information,"host_1","user_138" "1479161478.000",,4624,"Audit Success",User32,10,RemoteInteractive,1537756,Information,"host_1","user_86" "1479161868.000",,4624,"Audit Success",User32,10,RemoteInteractive,1537764,Information,"host_1","user_138" "1479163586.000",,4624,"Audit Success",User32,10,RemoteInteractive,1537793,Information,"host_1","user_122" "1479164981.000",,4624,"Audit Success",User32,10,RemoteInteractive,1537818,Information,"host_1","user_100" "1479165294.000",,4624,"Audit Success",User32,10,RemoteInteractive,1537834,Information,"host_1","user_142" "1479167069.000",,4624,"Audit Success",User32,10,RemoteInteractive,1537843,Information,"host_1","user_146" "1479168193.000",,4624,"Audit Success",User32,10,RemoteInteractive,1537853,Information,"host_1","user_122" "1479168227.000",,4624,"Audit Success",User32,10,RemoteInteractive,1537859,Information,"host_1","user_31" "1479169695.000",,4624,"Audit Success",User32,10,RemoteInteractive,1537873,Information,"host_1","user_95" "1479169754.000",,4624,"Audit Success",User32,10,RemoteInteractive,1537884,Information,"host_1","user_95" "1479172099.000",,4624,"Audit Success",User32,10,RemoteInteractive,3289956,Information,"host_23","user_1" "1479180577.000",,4624,"Audit Success",Advapi,2,Interactive,1073826451,Information,"host_11","user_4" "1479180579.000",,4624,"Audit Success",User32,10,RemoteInteractive,1073826563,Information,"host_11","user_139" "1479204215.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538033,Information,"host_1","user_88" "1479225731.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538103,Information,"host_1","user_138" "1479228724.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538121,Information,"host_1","user_138" "1479230286.000",,4624,"Audit Success",User32,10,RemoteInteractive,395812,Information,"host_24","user_47" "1479230720.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538132,Information,"host_1","user_39" "1479231868.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538145,Information,"host_1","user_106" "1479231885.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538149,Information,"host_1","user_31" "1479232315.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538160,Information,"host_1","user_138" "1479233190.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538175,Information,"host_1","user_52" "1479233442.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538178,Information,"host_1","user_71" "1479233585.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538184,Information,"host_1","user_146" "1479233617.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538189,Information,"host_1","user_16" "1479234134.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538197,Information,"host_1","user_138" "1479234184.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538206,Information,"host_1","user_122" "1479234198.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538212,Information,"host_1","user_138" "1479234548.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538219,Information,"host_1","user_100" "1479235165.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538228,Information,"host_1","user_138" "1479235312.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538233,Information,"host_1","user_12" "1479235635.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538247,Information,"host_1","user_86" "1479235889.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538254,Information,"host_1","user_57" "1479237108.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538268,Information,"host_1","user_138" "1479238245.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538278,Information,"host_1","user_12" "1479239164.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538292,Information,"host_1","user_53" "1479241306.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538312,Information,"host_1","user_122" "1479244641.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538343,Information,"host_1","user_112" "1479245169.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538348,Information,"host_1","user_122" "1479245502.000",,4624,"Audit Success",Advapi,2,Interactive,1079931113,Information,"host_11","user_4" "1479245525.000",,4624,"Audit Success",User32,10,RemoteInteractive,1079933514,Information,"host_11","user_139" "1479246502.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538364,Information,"host_1","user_30" "1479247387.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538374,Information,"host_1","user_65" "1479247925.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538384,Information,"host_1","user_51" "1479248088.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538389,Information,"host_1","user_16" "1479249189.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538400,Information,"host_1","user_138" "1479249219.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538406,Information,"host_1","user_81" "1479253305.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538432,Information,"host_1","user_30" "1479255311.000",,4624,"Audit Success",User32,10,RemoteInteractive,3290225,Information,"host_23","user_1" "1479255946.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538451,Information,"host_1","user_95" "1479256700.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538455,Information,"host_1","user_22" "1479257435.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538465,Information,"host_1","user_16" "1479257757.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538473,Information,"host_1","user_30" "1479263444.000",,4624,"Audit Success",Advapi,2,Interactive,1081609267,Information,"host_11","user_4" "1479263481.000",,4624,"Audit Success",User32,10,RemoteInteractive,1081612082,Information,"host_11","user_139" "1479271131.000",,4624,"Audit Success",Advapi,2,Interactive,1082256765,Information,"host_11","user_4" "1479271137.000",,4624,"Audit Success",User32,10,RemoteInteractive,1082257253,Information,"host_11","user_139" "1479278061.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538569,Information,"host_1","user_100" "1479294905.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538639,Information,"host_1","user_38" "1479294955.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538644,Information,"host_1","user_39" "1479315616.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538702,Information,"host_1","user_39" "1479317764.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538713,Information,"host_1","user_112" "1479317802.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538721,Information,"host_1","user_26" "1479317851.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538725,Information,"host_1","user_106" "1479319464.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538737,Information,"host_1","user_143" "1479320162.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538748,Information,"host_1","user_52" "1479320300.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538754,Information,"host_1","user_94" "1479321893.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538775,Information,"host_1","user_95" "1479321950.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538778,Information,"host_1","user_71" "1479322178.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538788,Information,"host_1","user_41" "1479324454.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538813,Information,"host_1","user_52" "1479329524.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538852,Information,"host_1","user_113" "1479329925.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538857,Information,"host_1","user_106" "1479330330.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538863,Information,"host_1","user_12" "1479331741.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538870,Information,"host_1","user_52" "1479332271.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538879,Information,"host_1","user_51" "1479333073.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538893,Information,"host_1","user_51" "1479333120.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538897,Information,"host_1","user_65" "1479333166.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538901,Information,"host_1","user_65" "1479333416.000",,4624,"Audit Success",User32,10,RemoteInteractive,396180,Information,"host_24","user_112" "1479333827.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538917,Information,"host_1","user_65" "1479335114.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538931,Information,"host_1","user_95" "1479335454.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538935,Information,"host_1","user_51" "1479339272.000",,4624,"Audit Success",Advapi,2,Interactive,1538967,Information,"host_1","user_82" "1479339274.000",,4624,"Audit Success",Advapi,2,Interactive,1538970,Information,"host_1","user_82" "1479339277.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538974,Information,"host_1","user_82" "1479341343.000",,4624,"Audit Success",User32,10,RemoteInteractive,1538992,Information,"host_1","user_51" "1479342331.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539006,Information,"host_1","user_51" "1479344075.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539024,Information,"host_1","user_52" "1479348250.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539047,Information,"host_1","user_94" "1479359696.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539084,Information,"host_1","user_146" "1479381624.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539188,Information,"host_1","user_39" "1479392154.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539223,Information,"host_1","user_39" "1479396869.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539242,Information,"host_1","user_39" "1479400257.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539256,Information,"host_1","user_146" "1479403228.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539270,Information,"host_1","user_12" "1479404389.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539281,Information,"host_1","user_65" "1479404537.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539287,Information,"host_1","user_65" "1479404849.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539296,Information,"host_1","user_115" "1479405656.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539301,Information,"host_1","user_146" "1479406140.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539306,Information,"host_1","user_106" "1479408667.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539327,Information,"host_1","user_31" "1479409342.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539333,Information,"host_1","user_51" "1479410305.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539341,Information,"host_1","user_112" "1479410448.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539348,Information,"host_1","user_146" "1479411224.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539366,Information,"host_1","user_16" "1479411902.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539383,Information,"host_1","user_146" "1479411964.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539388,Information,"host_1","user_52" "1479412407.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539396,Information,"host_1","user_16" "1479414322.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539413,Information,"host_1","user_16" "1479416037.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539426,Information,"host_1","user_94" "1479417010.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539439,Information,"host_1","user_51" "1479418409.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539464,Information,"host_1","user_52" "1479418576.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539468,Information,"host_1","user_57" "1479418713.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539473,Information,"host_1","user_16" "1479418737.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539479,Information,"host_1","user_31" "1479419268.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539491,Information,"host_1","user_53" "1479425462.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539545,Information,"host_1","user_30" "1479425697.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539550,Information,"host_1","user_51" "1479427577.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539567,Information,"host_1","user_63" "1479427694.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539571,Information,"host_1","user_51" "1479434644.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539623,Information,"host_1","user_122" "1479435329.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539631,Information,"host_1","user_82" "1479445938.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539666,Information,"host_1","user_52" "1479446346.000",,4624,"Audit Success",Advapi,2,Interactive,128752375,Information,"host_4","user_5" "1479479259.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539778,Information,"host_1","user_39" "1479483454.000",,4624,"Audit Success",Advapi,2,Interactive,1101052267,Information,"host_11","user_4" "1479483457.000",,4624,"Audit Success",User32,10,RemoteInteractive,1101052552,Information,"host_11","user_60" "1479489193.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539809,Information,"host_1","user_31" "1479490686.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539815,Information,"host_1","user_146" "1479490888.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539826,Information,"host_1","user_143" "1479492550.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539847,Information,"host_1","user_12" "1479492844.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539855,Information,"host_1","user_12" "1479493101.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539864,Information,"host_1","user_106" "1479493299.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539868,Information,"host_1","user_52" "1479493580.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539872,Information,"host_1","user_48" "1479493929.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539880,Information,"host_1","user_112" "1479493991.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539884,Information,"host_1","user_86" "1479496491.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539898,Information,"host_1","user_122" "1479497348.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539919,Information,"host_1","user_133" "1479497521.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539929,Information,"host_1","user_106" "1479498942.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539938,Information,"host_1","user_112" "1479501957.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539951,Information,"host_1","user_26" "1479503029.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539970,Information,"host_1","user_51" "1479503887.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539975,Information,"host_1","user_65" "1479504850.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539983,Information,"host_1","user_65" "1479507062.000",,4624,"Audit Success",User32,10,RemoteInteractive,1539998,Information,"host_1","user_115" "1479507825.000",,4624,"Audit Success",User32,10,RemoteInteractive,1540003,Information,"host_1","user_143" "1479508011.000",,4624,"Audit Success",User32,10,RemoteInteractive,1540009,Information,"host_1","user_122" "1479509692.000",,4624,"Audit Success",User32,10,RemoteInteractive,1540028,Information,"host_1","user_86" "1479509813.000",,4624,"Audit Success",User32,10,RemoteInteractive,1540033,Information,"host_1","user_63" "1479510311.000",,4624,"Audit Success",User32,10,RemoteInteractive,1540037,Information,"host_1","user_47" "1479512874.000",,4624,"Audit Success",User32,10,RemoteInteractive,1540065,Information,"host_1","user_16" "1479514811.000",,4624,"Audit Success",User32,10,RemoteInteractive,1540087,Information,"host_1","user_143" "1479517009.000",,4624,"Audit Success",User32,10,RemoteInteractive,1540103,Information,"host_1","user_86" "1479517982.000",,4624,"Audit Success",User32,10,RemoteInteractive,1540109,Information,"host_1","user_63" "1479519021.000",,4624,"Audit Success",User32,10,RemoteInteractive,1540119,Information,"host_1","user_122" "1479520235.000",,4624,"Audit Success",User32,10,RemoteInteractive,1540137,Information,"host_1","user_100" "1479520331.000",,4624,"Audit Success",User32,10,RemoteInteractive,1540145,Information,"host_1","user_138" "1479523785.000",,4624,"Audit Success",User32,10,RemoteInteractive,1540167,Information,"host_1","user_138" "1479558138.000",,4624,"Audit Success",Advapi,2,Interactive,1107661088,Information,"host_11","user_4" "1479558142.000",,4624,"Audit Success",User32,10,RemoteInteractive,1107661449,Information,"host_11","user_99" "1479577740.000",,4624,"Audit Success",Advapi,2,Interactive,1109278643,Information,"host_11","user_5" "1479577742.000",,4624,"Audit Success",User32,10,RemoteInteractive,1109278843,Information,"host_11","user_74" "1479590047.000",,4624,"Audit Success",User32,10,RemoteInteractive,1540377,Information,"host_1","user_146" "1479592344.000",,4624,"Audit Success",Advapi,2,Interactive,1110472456,Information,"host_11","user_5" "1479592348.000",,4624,"Audit Success",User32,10,RemoteInteractive,1110472829,Information,"host_11","user_74" "1479618611.000",,4624,"Audit Success",User32,10,RemoteInteractive,1540502,Information,"host_1","user_146" "1479660228.000",,4624,"Audit Success",User32,10,RemoteInteractive,1540622,Information,"host_1","user_146" "1479676918.000",,4624,"Audit Success",User32,10,RemoteInteractive,1540678,Information,"host_1","user_146" "1479725845.000",,4624,"Audit Success",User32,10,RemoteInteractive,1540822,Information,"host_1","user_39" "1479726237.000",,4624,"Audit Success",User32,10,RemoteInteractive,1540822,Information,host22,"user_146" "1479727265.000",,4624,"Audit Success",User32,10,RemoteInteractive,1540834,Information,"host_1","user_39" "1479727657.000",,4624,"Audit Success",User32,10,RemoteInteractive,1540834,Information,host22,"user_146" "1479730342.000",,4624,"Audit Success",User32,10,RemoteInteractive,1540852,Information,"host_1","user_39" "1479730734.000",,4624,"Audit Success",User32,10,RemoteInteractive,1540852,Information,host6,"user_146" "1479732157.000",,4624,"Audit Success",User32,10,RemoteInteractive,1540863,Information,"host_1","user_39" "1479732549.000",,4624,"Audit Success",User32,10,RemoteInteractive,1540863,Information,host14,"user_146" "1479741650.000",,4624,"Audit Success",User32,10,RemoteInteractive,1540892,Information,"host_1","user_39" "1479742042.000",,4624,"Audit Success",User32,10,RemoteInteractive,1540892,Information,host7,"user_146" "1479747020.000",,4624,"Audit Success",User32,10,RemoteInteractive,1540622,Information,host0,"user_146" "1479750010.000",,4624,"Audit Success",User32,10,RemoteInteractive,1540929,Information,"host_1","user_104" "1479750135.000",,4624,"Audit Success",User32,10,RemoteInteractive,1540933,Information,"host_1","user_106" "1479750402.000",,4624,"Audit Success",User32,10,RemoteInteractive,1540929,Information,host21,"user_146" "1479750527.000",,4624,"Audit Success",User32,10,RemoteInteractive,1540933,Information,host14,"user_146" "1479751333.000",,4624,"Audit Success",User32,10,RemoteInteractive,1540938,Information,"host_1","user_52" "1479751700.000",,4624,"Audit Success",User32,10,RemoteInteractive,1540944,Information,"host_1","user_146" "1479751725.000",,4624,"Audit Success",User32,10,RemoteInteractive,1540938,Information,host14,"user_146" "1479751834.000",,4624,"Audit Success",User32,10,RemoteInteractive,1540950,Information,"host_1","user_86" "1479752092.000",,4624,"Audit Success",User32,10,RemoteInteractive,1540944,Information,host17,"user_146" "1479752150.000",,4624,"Audit Success",User32,10,RemoteInteractive,1540956,Information,"host_1","user_48" "1479752226.000",,4624,"Audit Success",User32,10,RemoteInteractive,1540950,Information,host5,"user_146" "1479752542.000",,4624,"Audit Success",User32,10,RemoteInteractive,1540956,Information,host7,"user_146" "1479753610.000",,4624,"Audit Success",User32,10,RemoteInteractive,1540967,Information,"host_1","user_12" "1479753822.000",,4624,"Audit Success",User32,10,RemoteInteractive,1540973,Information,"host_1","user_12" "1479754002.000",,4624,"Audit Success",User32,10,RemoteInteractive,1540967,Information,host14,"user_146" "1479754214.000",,4624,"Audit Success",User32,10,RemoteInteractive,1540973,Information,host14,"user_146" "1479754959.000",,4624,"Audit Success",User32,10,RemoteInteractive,1540981,Information,"host_1","user_143" "1479755209.000",,4624,"Audit Success",User32,10,RemoteInteractive,1540986,Information,"host_1","user_12" "1479755253.000",,4624,"Audit Success",User32,10,RemoteInteractive,1540991,Information,"host_1","user_71" "1479755351.000",,4624,"Audit Success",User32,10,RemoteInteractive,1540981,Information,host0,"user_146" "1479755601.000",,4624,"Audit Success",User32,10,RemoteInteractive,1540986,Information,host19,"user_146" "1479755645.000",,4624,"Audit Success",User32,10,RemoteInteractive,1540991,Information,host5,"user_146" "1479755800.000",,4624,"Audit Success",User32,10,RemoteInteractive,1540998,Information,"host_1","user_95" "1479756192.000",,4624,"Audit Success",User32,10,RemoteInteractive,1540998,Information,host8,"user_146" "1479760850.000",,4624,"Audit Success",User32,10,RemoteInteractive,1541023,Information,"host_1","user_65" "1479761242.000",,4624,"Audit Success",User32,10,RemoteInteractive,1541023,Information,host6,"user_146" "1479761648.000",,4624,"Audit Success",User32,10,RemoteInteractive,1541031,Information,"host_1","user_41" "1479761907.000",,4624,"Audit Success",User32,10,RemoteInteractive,1541036,Information,"host_1","user_95" "1479762040.000",,4624,"Audit Success",User32,10,RemoteInteractive,1541031,Information,"host_23","user_146" "1479762096.000",,4624,"Audit Success",User32,10,RemoteInteractive,1541040,Information,"host_1","user_65" "1479762299.000",,4624,"Audit Success",User32,10,RemoteInteractive,1541036,Information,host19,"user_146" "1479762488.000",,4624,"Audit Success",User32,10,RemoteInteractive,1541040,Information,host7,"user_146" "1479762621.000",,4624,"Audit Success",Advapi,2,Interactive,1100562653,Information,"host_12","user_32" "1479763013.000",,4624,"Audit Success",Advapi,2,Interactive,1100562653,Information,host15,"user_146" "1479763038.000",,4624,"Audit Success",User32,10,RemoteInteractive,1541050,Information,"host_1","user_122" "1479763208.000",,4624,"Audit Success",User32,10,RemoteInteractive,1541054,Information,"host_1","user_95" "1479763430.000",,4624,"Audit Success",User32,10,RemoteInteractive,1541050,Information,host15,"user_146" "1479763600.000",,4624,"Audit Success",User32,10,RemoteInteractive,1541054,Information,host8,"user_146" "1479763710.000",,4624,"Audit Success",User32,10,RemoteInteractive,1540678,Information,host5,"user_146" "1479766662.000",,4624,"Audit Success",User32,10,RemoteInteractive,1541077,Information,"host_1","user_100" "1479767054.000",,4624,"Audit Success",User32,10,RemoteInteractive,1541077,Information,host8,"user_146" "1479767746.000",,4624,"Audit Success",User32,10,RemoteInteractive,3291962,Information,"host_23","user_1" "1479767798.000",,4624,"Audit Success",User32,10,RemoteInteractive,1541089,Information,"host_1","user_63" "1479768138.000",,4624,"Audit Success",User32,10,RemoteInteractive,3291962,Information,host8,"user_146" "1479768190.000",,4624,"Audit Success",User32,10,RemoteInteractive,1541089,Information,host1,"user_146" "1479769822.000",,4624,"Audit Success",User32,10,RemoteInteractive,1541099,Information,"privileged_host_47","svc_system_monitoring" "1479770214.000",,4624,"Audit Success",User32,10,RemoteInteractive,1541099,Information,host16,"user_146"