"netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv2", "duration": 973 }, "timestamp_tval": { "tv_sec": 1662647910, "tv_usec": 889129 } }, { "timestamp": "2022-09-12T13:07:49.402463-0700", "type": "Authentication", "Authentication": { "version": { "major": 1, "minor": 2 }, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_NO_SUCH_USER", "localAddress": "ipv4:172.168.40.16:445", "remoteAddress": "ipv4:172.168.40.57:54999", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "MicrosoftAccount", "clientAccount": "root", "workstation": "STAR133", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "root", "mappedDomain": "MicrosoftAccount", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv2", "duration": 7718 }, "timestamp_tval": { "tv_sec": 1663013269, "tv_usec": 402463 } }, { "timestamp": "2022-09-12T13:07:55.194588-0700", "type": "Authentication", "Authentication": { "version": { "major": 1, "minor": 2 }, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_NO_SUCH_USER", "localAddress": "ipv4:172.168.40.16:445", "remoteAddress": "ipv4:172.168.40.57:55006", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "MicrosoftAccount", "clientAccount": "root", "workstation": "STAR133", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "root", "mappedDomain": "MicrosoftAccount", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv2", "duration": 833 }, "timestamp_tval": { "tv_sec": 1663013275, "tv_usec": 194588 } }, { "timestamp": "2022-09-12T13:08:52.674105-0700", "type": "Authentication", "Authentication": { "version": { "major": 1, "minor": 2 }, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_NO_SUCH_USER", "localAddress": "ipv4:172.168.40.16:445", "remoteAddress": "ipv4:172.168.40.57:55072", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "MicrosoftAccount", "clientAccount": "root", "workstation": "STAR133", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "root", "mappedDomain": "MicrosoftAccount", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv2", "duration": 851 }, "timestamp_tval": { "tv_sec": 1663013332, "tv_usec": 674105 } }, { "timestamp": "2022-09-12T13:10:27.216046-0700", "type": "Authentication", "Authentication": { "version": { "major": 1, "minor": 2 }, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_NO_SUCH_USER", "localAddress": "ipv4:172.168.40.16:445", "remoteAddress": "ipv4:172.168.40.57:65148", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "MicrosoftAccount", "clientAccount": "root", "workstation": "STAR133", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "root", "mappedDomain": "MicrosoftAccount", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv2", "duration": 871 }, "timestamp_tval": { "tv_sec": 1663013427, "tv_usec": 216046 } }, { "timestamp": "2022-09-12T13:11:54.006242-0700", "type": "Authentication", "Authentication": { "version": { "major": 1, "minor": 2 }, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_NO_SUCH_USER", "localAddress": "ipv4:172.168.40.16:445", "remoteAddress": "ipv4:172.168.40.57:65250", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "MicrosoftAccount", "clientAccount": "root", "workstation": "STAR133", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "root", "mappedDomain": "MicrosoftAccount", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv2", "duration": 854 }, "timestamp_tval": { "tv_sec": 1663013514, "tv_usec": 6242 } }, { "timestamp": "2022-09-12T13:12:23.419072-0700", "type": "Authentication", "Authentication": { "version": { "major": 1, "minor": 2 }, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_NO_SUCH_USER", "localAddress": "ipv4:172.168.40.16:445", "remoteAddress": "ipv4:172.168.40.57:65285", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "MicrosoftAccount", "clientAccount": "root", "workstation": "STAR133", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "root", "mappedDomain": "MicrosoftAccount", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv2", "duration": 854 }, "timestamp_tval": { "tv_sec": 1663013543, "tv_usec": 419072 } }, { "timestamp": "2022-09-12T13:13:58.758656-0700", "type": "Authentication", "Authentication": { "version": { "major": 1, "minor": 2 }, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_NO_SUCH_USER", "localAddress": "ipv4:172.168.40.16:445", "remoteAddress": "ipv4:172.168.40.57:65393", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "MicrosoftAccount", "clientAccount": "root", "workstation": "STAR133", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "root", "mappedDomain": "MicrosoftAccount", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv2", "duration": 853 }, "timestamp_tval": { "tv_sec": 1663013638, "tv_usec": 758656 } }, { "timestamp": "2022-09-12T13:15:16.922703-0700", "type": "Authentication", "Authentication": { "version": { "major": 1, "minor": 2 }, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_NO_SUCH_USER", "localAddress": "ipv4:172.168.40.16:445", "remoteAddress": "ipv4:172.168.40.57:65478", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "MicrosoftAccount", "clientAccount": "root", "workstation": "STAR133", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "root", "mappedDomain": "MicrosoftAccount", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv2", "duration": 834 }, "timestamp_tval": { "tv_sec": 1663013716, "tv_usec": 922703 } }, { "timestamp": "2022-09-12T13:26:12.455811-0700", "type": "Authentication", "Authentication": { "version": { "major": 1, "minor": 2 }, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_NO_SUCH_USER", "localAddress": "ipv4:172.168.40.16:445", "remoteAddress": "ipv4:172.168.40.57:50234", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "MicrosoftAccount", "clientAccount": "root", "workstation": "STAR133", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "root", "mappedDomain": "MicrosoftAccount", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv2", "duration": 836 }, "timestamp_tval": { "tv_sec": 1663014372, "tv_usec": 455811 } }, { "timestamp": "2022-09-12T13:40:21.459431-0700", "type": "Authentication", "Authentication": { "version": { "major": 1, "minor": 2 }, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_NO_SUCH_USER", "localAddress": "ipv4:172.168.40.16:445", "remoteAddress": "ipv4:172.168.40.57:51241", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "MicrosoftAccount", "clientAccount": "root", "workstation": "STAR133", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "root", "mappedDomain": "MicrosoftAccount", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv2", "duration": 1174 }, "timestamp_tval": { "tv_sec": 1663015221, "tv_usec": 459431 } }, { "timestamp": "2022-09-12T13:40:21.473426-0700", "type": "Authentication", "Authentication": { "version": { "major": 1, "minor": 2 }, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_NO_SUCH_USER", "localAddress": "ipv4:172.168.40.16:445", "remoteAddress": "ipv4:172.168.40.57:51242", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "MicrosoftAccount", "clientAccount": "root", "workstation": "STAR133", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "root", "mappedDomain": "MicrosoftAccount", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv2", "duration": 957 }, "timestamp_tval": { "tv_sec": 1663015221, "tv_usec": 473426 } }, { "timestamp": "2022-09-12T13:40:27.264288-0700", "type": "Authentication", "Authentication": { "version": { "major": 1, "minor": 2 }, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_NO_SUCH_USER", "localAddress": "ipv4:172.168.40.16:445", "remoteAddress": "ipv4:172.168.40.57:51249", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "MicrosoftAccount", "clientAccount": "root", "workstation": "STAR133", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "root", "mappedDomain": "MicrosoftAccount", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv2", "duration": 1084 }, "timestamp_tval": { "tv_sec": 1663015227, "tv_usec": 264288 } }, { "timestamp": "2022-09-12T13:40:38.632581-0700", "type": "Authentication", "Authentication": { "version": { "major": 1, "minor": 2 }, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_NO_SUCH_USER", "localAddress": "ipv4:172.168.40.16:445", "remoteAddress": "ipv4:172.168.40.57:51263", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "MicrosoftAccount", "clientAccount": "Media", "workstation": "STAR133", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "Media", "mappedDomain": "MicrosoftAccount", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv2", "duration": 1041 }, "timestamp_tval": { "tv_sec": 1663015238, "tv_usec": 632581 } }, { "timestamp": "2022-09-12T13:41:34.926595-0700", "type": "Authentication", "Authentication": { "version": { "major": 1, "minor": 2 }, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_NO_SUCH_USER", "localAddress": "ipv4:172.168.40.16:445", "remoteAddress": "ipv4:172.168.40.57:51346", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "MicrosoftAccount", "clientAccount": "root", "workstation": "STAR133", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "root", "mappedDomain": "MicrosoftAccount", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv2", "duration": 1022 }, "timestamp_tval": { "tv_sec": 1663015294, "tv_usec": 926595 } }, { "timestamp": "2022-09-12T13:41:35.674476-0700", "type": "Authentication", "Authentication": { "version": { "major": 1, "minor": 2 }, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_NO_SUCH_USER", "localAddress": "ipv4:172.168.40.16:445", "remoteAddress": "ipv4:172.168.40.57:51348", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "MicrosoftAccount", "clientAccount": "root", "workstation": "STAR133", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "root", "mappedDomain": "MicrosoftAccount", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv2", "duration": 1029 }, "timestamp_tval": { "tv_sec": 1663015295, "tv_usec": 674476 } }, { "timestamp": "2022-09-12T13:41:35.689433-0700", "type": "Authentication", "Authentication": { "version": { "major": 1, "minor": 2 }, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_NO_SUCH_USER", "localAddress": "ipv4:172.168.40.16:445", "remoteAddress": "ipv4:172.168.40.57:51349", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "MicrosoftAccount", "clientAccount": "root", "workstation": "STAR133", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "root", "mappedDomain": "MicrosoftAccount", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv2", "duration": 953 }, "timestamp_tval": { "tv_sec": 1663015295, "tv_usec": 689433 } }, { "timestamp": "2022-09-12T13:41:35.704767-0700", "type": "Authentication", "Authentication": { "version": { "major": 1, "minor": 2 }, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_NO_SUCH_USER", "localAddress": "ipv4:172.168.40.16:445", "remoteAddress": "ipv4:172.168.40.57:51350", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "MicrosoftAccount", "clientAccount": "root", "workstation": "STAR133", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "root", "mappedDomain": "MicrosoftAccount", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv2", "duration": 883 }, "timestamp_tval": { "tv_sec": 1663015295, "tv_usec": 704767 } }, { "timestamp": "2022-09-12T13:41:45.634943-0700", "type": "Authentication", "Authentication": { "version": { "major": 1, "minor": 2 }, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_NO_SUCH_USER", "localAddress": "ipv4:172.168.40.16:445", "remoteAddress": "ipv4:172.168.40.57:51362", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "MicrosoftAccount", "clientAccount": "Media", "workstation": "STAR133", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "Media", "mappedDomain": "MicrosoftAccount", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv2", "duration": 947 }, "timestamp_tval": { "tv_sec": 1663015305, "tv_usec": 634943 } }, { "timestamp": "2022-09-12T13:42:05.084969-0700", "type": "Authentication", "Authentication": { "version": { "major": 1, "minor": 2 }, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_NO_SUCH_USER", "localAddress": "ipv4:172.168.40.16:445", "remoteAddress": "ipv4:172.168.40.57:51385", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "MicrosoftAccount", "clientAccount": "Media", "workstation": "STAR133", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "Media", "mappedDomain": "MicrosoftAccount", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv2", "duration": 819 }, "timestamp_tval": { "tv_sec": 1663015325, "tv_usec": 84969 } }, { "timestamp": "2022-09-12T13:46:56.242519-0700", "type": "Authentication", "Authentication": { "version": { "major": 1, "minor": 2 }, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_NO_SUCH_USER", "localAddress": "ipv4:172.168.40.16:445", "remoteAddress": "ipv4:172.168.40.57:51730", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "MicrosoftAccount", "clientAccount": "Media", "workstation": "STAR133", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "Media", "mappedDomain": "MicrosoftAccount", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv2", "duration": 931 }, "timestamp_tval": { "tv_sec": 1663015616, "tv_usec": 242519 } }, { "timestamp": "2022-09-12T18:28:19.266496-0700", "type": "Authentication", "Authentication": { "version": { "major": 1, "minor": 2 }, "eventId": 4624, "logonId": "0", "logonType": 3, "status": "NT_STATUS_OK", "localAddress": "ipv4:172.168.40.16:445", "remoteAddress": "ipv4:172.168.40.57:62138", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "MicrosoftAccount", "clientAccount": "Media", "workstation": "STAR133", "becameAccount": "media", "becameDomain": "TRUENAS", "becameSid": "S-1-5-21-2877373364-2922499262-2155222533-20066", "mappedAccount": "Media", "mappedDomain": "MicrosoftAccount", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv2", "duration": 3336 }, "timestamp_tval": { "tv_sec": 1663032499, "tv_usec": 266496 } }, { "timestamp": "2022-09-12T18:31:33.359781-0700", "type": "Authentication", "Authentication": { "version": { "major": 1, "minor": 2 }, "eventId": 4624, "logonId": "0", "logonType": 3, "status": "NT_STATUS_OK", "localAddress": "ipv4:172.168.40.16:445", "remoteAddress": "ipv4:172.168.40.57:62365", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "MicrosoftAccount", "clientAccount": "Media", "workstation": "STAR133", "becameAccount": "media", "becameDomain": "TRUENAS", "becameSid": "S-1-5-21-2877373364-2922499262-2155222533-20066", "mappedAccount": "Media", "mappedDomain": "MicrosoftAccount", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv2", "duration": 1382 }, "timestamp_tval": { "tv_sec": 1663032693, "tv_usec": 359781 } }, { "timestamp": "2022-09-12T18:33:43.786767-0700", "type": "Authentication", "Authentication": { "version": { "major": 1, "minor": 2 }, "eventId": 4624, "logonId": "0", "logonType": 3, "status": "NT_STATUS_OK", "localAddress": "ipv4:172.168.40.16:445", "remoteAddress": "ipv4:172.168.40.57:62527", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "MicrosoftAccount", "clientAccount": "Media", "workstation": "STAR133", "becameAccount": "media", "becameDomain": "TRUENAS", "becameSid": "S-1-5-21-2877373364-2922499262-2155222533-20066", "mappedAccount": "Media", "mappedDomain": "MicrosoftAccount", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv2", "duration": 1367 }, "timestamp_tval": { "tv_sec": 1663032823, "tv_usec": 786767 } }, { "timestamp": "2022-09-12T18:43:33.359230-0700", "type": "Authentication", "Authentication": { "version": { "major": 1, "minor": 2 }, "eventId": 4624, "logonId": "0", "logonType": 3, "status": "NT_STATUS_OK", "localAddress": "ipv4:172.168.40.16:445", "remoteAddress": "ipv4:172.168.40.57:63217", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "MicrosoftAccount", "clientAccount": "Media", "workstation": "STAR133", "becameAccount": "media", "becameDomain": "TRUENAS", "becameSid": "S-1-5-21-2877373364-2922499262-2155222533-20066", "mappedAccount": "Media", "mappedDomain": "MicrosoftAccount", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv2", "duration": 1452 }, "timestamp_tval": { "tv_sec": 1663033413, "tv_usec": 359230 } }, { "timestamp": "2022-09-13T19:14:15.317978-0700", "type": "Authentication", "Authentication": { "version": { "major": 1, "minor": 2 }, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_NO_SUCH_USER", "localAddress": "ipv4:172.168.40.16:445", "remoteAddress": "ipv4:172.168.40.57:61853", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "MicrosoftAccount", "clientAccount": "\\truenas\\media", "workstation": "STAR133", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "\\truenas\\media", "mappedDomain": "MicrosoftAccount", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv2", "duration": 2184 }, "timestamp_tval": { "tv_sec": 1663121655, "tv_usec": 317978 } }, { "timestamp": "2022-09-13T19:14:42.507216-0700", "type": "Authentication", "Authentication": { "version": { "major": 1, "minor": 2 }, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_NO_SUCH_USER", "localAddress": "ipv4:172.168.40.16:445", "remoteAddress": "ipv4:172.168.40.57:61934", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "MicrosoftAccount", "clientAccount": "\\172.168.40.16\\media", "workstation": "STAR133", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "\\172.168.40.16\\media", "mappedDomain": "MicrosoftAccount", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv2", "duration": 974 }, "timestamp_tval": { "tv_sec": 1663121682, "tv_usec": 507216 } }, { "timestamp": "2022-09-14T08:40:52.707836-0700", "type": "Authentication", "Authentication": { "version": { "major": 1, "minor": 2 }, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_WRONG_PASSWORD", "localAddress": "ipv4:172.168.40.16:445", "remoteAddress": "ipv4:172.168.40.57:59711", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "172.168.40.16", "clientAccount": "media", "workstation": "STAR133", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "media", "mappedDomain": "172.168.40.16", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv2", "duration": 10687 }, "timestamp_tval": { "tv_sec": 1663170052, "tv_usec": 707836 } }, { "timestamp": "2022-09-14T08:46:52.426984-0700", "type": "Authentication", "Authentication": { "version": { "major": 1, "minor": 2 }, "eventId": 4625, "logonId": "0", "logonType": 3, "status": "NT_STATUS_NO_SUCH_USER", "localAddress": "ipv4:172.168.40.16:445", "remoteAddress": "ipv4:172.168.40.57:63872", "serviceDescription": "SMB2", "authDescription": null, "clientDomain": "MicrosoftAccount", "clientAccount": "\\172.168.40.16\\test", "workstation": "STAR133", "becameAccount": null, "becameDomain": null, "becameSid": null, "mappedAccount": "\\172.168.40.16\\test", "mappedDomain": "MicrosoftAccount", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "NTLMv2", "duration": 900 }, "timestamp_tval": { "tv_sec": 1663170412, "tv_usec": 426984