Log Explorer
Search and investigate security event logs
100 events found
| Event ID | Timestamp | Event Type | Source IP | Dest IP | User | Host | Severity | |
|---|---|---|---|---|---|---|---|---|
| EVT-PS01 | 2026-07-12T04:52:00.000Z | Malware Beaconing | 10.10.4.42 | 45.83.64.12 | jsmith | WS-042 | Critical | |
| EVT-E001 | 2026-07-11T02:00:00.000Z | Suspicious PowerShell | 10.10.1.5 | N/A | svcBackup | DC-01 | Critical | |
| EVT-E002 | 2026-07-11T02:25:00.000Z | Data Exfiltration | 10.10.3.8 | 85.203.44.12 | svcBackup | FILE-SERVER-02 | Critical | |
| EVT-D500 | 2026-07-11T08:00:00.000Z | Port Scan | 198.51.100.90 | N/A | N/A | VPN-GW-02 | Medium | |
| EVT-D800 | 2026-07-08T11:00:00.000Z | Suspicious File Download | 10.60.5.1 | N/A | nlee | WKSTN-RD-14 | Medium | |
| EVT-D821 | 2026-07-08T11:08:00.000Z | Malware Beaconing | 10.60.5.2 | 45.61.136.9 | kchen | WKSTN-RD-19 | Critical | |
| EVT-D802 | 2026-07-08T11:06:00.000Z | Suspicious File Download | 10.60.5.3 | N/A | sgupta | WKSTN-RD-22 | Medium | |
| EVT-D902 | 2026-07-12T01:00:00.000Z | Brute Force Attempt | 10.10.1.5 | N/A | N/A | DC-01 | Critical | |
| EVT-D911 | 2026-07-12T01:20:00.000Z | Successful Login | 10.10.1.5 | N/A | Administrator | FILE-SERVER-01 | Critical | |
| EVT-D912 | 2026-07-12T01:30:00.000Z | Successful Login | 10.10.1.5 | N/A | Administrator | BACKUP-SRV-01 | Critical | |
| EVT-D920 | 2026-07-12T01:55:00.000Z | Data Exfiltration | 10.10.1.5 | 198.51.100.150 | Administrator | FILE-SERVER-01 | Critical | |
| EVT-D701 | 2026-07-09T14:20:00.000Z | Successful Login | 103.6.151.22 | N/A | epark | M365-TENANT | High | |
| EVT-D910 | 2026-07-12T01:10:00.000Z | Successful Login | 10.10.1.5 | N/A | Administrator | DC-01 | Critical | |
| EVT-D403 | 2026-07-12T13:30:00.000Z | Data Exfiltration | 10.35.2.9 | 91.243.85.7 | dlee | CODE-REPO-SRV | Critical | |
| EVT-D510 | 2026-07-11T10:25:00.000Z | Successful Login | 10.45.1.10 | N/A | vpnuser1 | VPN-GW-02 | Medium | |
| EVT-D511 | 2026-07-11T10:28:00.000Z | Successful Login | 10.45.1.11 | N/A | vpnuser2 | VPN-GW-02 | Medium | |
| EVT-D601 | 2026-07-10T15:10:00.000Z | Brute Force Attempt | 10.30.30.199 | N/A | N/A | VLAN30-GATEWAY | High | |
| EVT-D513 | 2026-07-11T10:34:00.000Z | Successful Login | 10.45.1.13 | N/A | vpnuser4 | VPN-GW-02 | Medium | |
| EVT-D604 | 2026-07-10T14:30:00.000Z | Successful Login | 10.30.30.199 | N/A | N/A | SWITCH-BLDG3 | Medium | |
| EVT-D801 | 2026-07-08T11:03:00.000Z | Suspicious File Download | 10.60.5.2 | N/A | kchen | WKSTN-RD-19 | Medium | |
| EVT-D402 | 2026-07-12T13:15:00.000Z | Successful Login | 10.35.2.9 | N/A | dlee | CODE-REPO-SRV | High | |
| EVT-D703 | 2026-07-09T14:45:00.000Z | Privilege Escalation | 103.6.151.22 | N/A | epark | M365-TENANT | Critical | |
| EVT-D812 | 2026-07-08T11:08:00.000Z | Suspicious PowerShell | 10.60.5.3 | N/A | sgupta | WKSTN-RD-22 | High | |
| EVT-D602 | 2026-07-10T15:20:00.000Z | Successful Login | 10.30.30.199 | N/A | wkuser1 | CRM-PROD-01 | High | |
| EVT-D830 | 2026-07-08T11:30:00.000Z | Data Exfiltration | 10.60.5.1 | 45.61.136.9 | nlee | WKSTN-RD-14 | Critical | |
| EVT-D501 | 2026-07-11T10:00:00.000Z | DNS Tunneling | 198.51.100.90 | N/A | N/A | DNS-CACHE-01 | High | |
| EVT-D520 | 2026-07-11T10:50:00.000Z | Successful Login | 198.51.100.90 | N/A | vpnuser2 | FINANCE-PORTAL-01 | Critical | |
| EVT-D811 | 2026-07-08T11:05:00.000Z | Suspicious PowerShell | 10.60.5.2 | N/A | kchen | WKSTN-RD-19 | High | |
| EVT-D820 | 2026-07-08T11:05:00.000Z | Malware Beaconing | 10.60.5.1 | 45.61.136.9 | nlee | WKSTN-RD-14 | Critical | |
| EVT-D512 | 2026-07-11T10:31:00.000Z | Successful Login | 10.45.1.12 | N/A | vpnuser3 | VPN-GW-02 | Medium | |
| EVT-D900 | 2026-07-11T21:00:00.000Z | Port Scan | 198.51.100.150 | N/A | N/A | DC-01 | Medium | |
| EVT-D603 | 2026-07-10T15:30:00.000Z | Privilege Escalation | 10.30.30.199 | N/A | itadmin1 | DC-01 | Critical | |
| EVT-D514 | 2026-07-11T10:37:00.000Z | Successful Login | 10.45.1.14 | N/A | vpnuser5 | VPN-GW-02 | Medium | |
| EVT-D600 | 2026-07-10T15:00:00.000Z | Port Scan | 10.30.30.199 | N/A | N/A | VLAN30-GATEWAY | Medium | |
| EVT-D810 | 2026-07-08T11:02:00.000Z | Suspicious PowerShell | 10.60.5.1 | N/A | nlee | WKSTN-RD-14 | High | |
| EVT-D822 | 2026-07-08T11:11:00.000Z | Malware Beaconing | 10.60.5.3 | 45.61.136.9 | sgupta | WKSTN-RD-22 | Critical | |
| EVT-D502 | 2026-07-11T10:20:00.000Z | Phishing Login | 198.51.100.90 | N/A | N/A | DNS-CACHE-01 | Critical | |
| EVT-D913 | 2026-07-12T01:40:00.000Z | Successful Login | 10.10.1.5 | N/A | Administrator | CRM-PROD-01 | Critical | |
| EVT-D901 | 2026-07-12T00:00:00.000Z | Privilege Escalation | 10.10.1.5 | N/A | krbtgt | DC-01 | Critical | |
| EVT-D700 | 2026-07-09T14:00:00.000Z | Phishing Login | 10.55.1.2 | N/A | epark | M365-TENANT | High | |
| EVT-D702 | 2026-07-09T14:35:00.000Z | Data Exfiltration | 103.6.151.22 | 103.6.151.22 | epark | SHAREPOINT-CORP | Critical | |
| EVT-D401 | 2026-07-12T13:05:00.000Z | Malware Beaconing | 10.35.2.9 | 91.243.85.7 | dlee | WKSTN-DEV-22 | Critical | |
| EVT-D102 | 2026-07-13T22:47:00.000Z | Privilege Escalation | 10.20.5.11 | N/A | svcADSync | DC-01 | Critical | |
| EVT-D105 | 2026-07-13T23:37:00.000Z | Data Exfiltration | 10.20.5.11 | 203.0.113.201 | Administrator | FILE-SERVER-02 | Critical | |
| EVT-D104 | 2026-07-13T23:17:00.000Z | Successful Login | 10.20.5.11 | N/A | Administrator | FILE-SERVER-02 | Critical | |
| EVT-D202 | 2026-07-12T11:12:00.000Z | Port Scan | 10.25.1.7 | N/A | N/A | EMR-SERVER-01 | Medium | |
| EVT-D203 | 2026-07-13T00:12:00.000Z | Data Exfiltration | 10.25.1.9 | 185.220.100.44 | svcEMR | PATIENT-DB-02 | Critical | |
| EVT-D205 | 2026-07-14T06:12:00.000Z | Suspicious PowerShell | 10.25.1.7 | N/A | N/A | EMR-SERVER-01 | Critical | |
| EVT-D300 | 2026-07-13T21:30:00.000Z | Successful Login | 71.88.44.12 | N/A | mstone | DC-01 | Medium | |
| EVT-D001 | 2026-07-14T09:00:00.000Z | Port Scan | 194.36.191.20 | N/A | N/A | WEB-SRV-01 | Medium | |
| EVT-D101 | 2026-07-13T18:47:00.000Z | Privilege Escalation | 10.20.5.11 | N/A | N/A | WKSTN-IT-11 | High | |
| EVT-D400 | 2026-07-12T13:00:00.000Z | Suspicious PowerShell | 10.35.2.9 | N/A | dlee | WKSTN-DEV-22 | High | |
| EVT-D004 | 2026-07-14T09:55:00.000Z | Successful Login | 10.15.2.4 | N/A | svcWebApp | DB-SERVER-03 | Critical | |
| EVT-D201 | 2026-07-12T09:12:00.000Z | Malware Beaconing | 10.25.1.7 | 185.220.100.44 | gpatil | EMR-SERVER-01 | High | |
| EVT-D204 | 2026-07-14T03:12:00.000Z | Privilege Escalation | 10.25.1.7 | N/A | N/A | BACKUP-SRV-01 | Critical | |
| EVT-D301 | 2026-07-13T21:50:00.000Z | Privilege Escalation | 71.88.44.12 | N/A | mstone | FIREWALL-CORE | Critical | |
| EVT-D100 | 2026-07-13T16:47:00.000Z | Suspicious File Download | 203.0.113.201 | N/A | N/A | WKSTN-IT-11 | Medium | |
| EVT-D103 | 2026-07-13T23:02:00.000Z | Successful Login | 10.20.5.11 | N/A | Administrator | DC-01 | Critical | |
| EVT-D200 | 2026-07-12T06:12:00.000Z | Phishing Login | 185.220.100.44 | N/A | gpatil | EMR-SERVER-01 | Critical | |
| EVT-D302 | 2026-07-13T22:05:00.000Z | Privilege Escalation | 71.88.44.12 | N/A | mstone | PROD-DB-01 | Critical | |
| EVT-D006 | 2026-07-14T10:20:00.000Z | Malware Beaconing | 10.15.2.1 | 194.36.191.20 | N/A | WEB-SRV-01 | High | |
| EVT-D303 | 2026-07-13T22:20:00.000Z | Privilege Escalation | 71.88.44.12 | N/A | mstone | DC-01 | Critical | |
| EVT-D002 | 2026-07-14T09:20:00.000Z | Brute Force Attempt | 194.36.191.20 | N/A | N/A | WEB-SRV-01 | High | |
| EVT-D003 | 2026-07-14T09:47:00.000Z | Suspicious PowerShell | 194.36.191.20 | N/A | www-data | WEB-SRV-01 | Critical | |
| EVT-D005 | 2026-07-14T10:10:00.000Z | Data Exfiltration | 10.15.2.4 | 194.36.191.20 | N/A | DB-SERVER-03 | Critical | |
| EVT-D304 | 2026-07-13T22:35:00.000Z | Privilege Escalation | 71.88.44.12 | N/A | mstone | BACKUP-SRV | Critical | |
| EVT-B10 | 2026-07-13T02:08:00.000Z | Successful Login | 46.161.27.34 | N/A | customer_stuff1 | PORTAL-01 | High | |
| EVT-C14 | 2026-06-23T14:34:00.000Z | Malware Beaconing | 10.90.1.4 | 104.244.72.115 | N/A | CLOUD-INST-04 | High | |
| EVT-C200 | 2026-06-25T14:00:00.000Z | Data Exfiltration | 10.90.1.3 | 104.244.72.115 | clee | CLOUD-INST-03 | Critical | |
| EVT-B010 | 2026-07-13T02:03:20.000Z | Failed Login | 46.161.27.34 | N/A | customer_stuff11 | PORTAL-01 | Low | |
| EVT-B16 | 2026-07-13T02:10:00.000Z | Successful Login | 46.161.27.34 | N/A | customer_stuff7 | PORTAL-01 | High | |
| EVT-C18 | 2026-06-23T14:38:00.000Z | Malware Beaconing | 10.90.1.8 | 104.244.72.115 | N/A | CLOUD-INST-08 | High | |
| EVT-B011 | 2026-07-13T02:03:40.000Z | Failed Login | 91.219.236.9 | N/A | customer_stuff12 | PORTAL-01 | Low | |
| EVT-A901 | 2026-07-14T05:00:00.000Z | Data Exfiltration | external-scanner | 45.33.32.156 | N/A | STORAGE-GATEWAY | Critical | |
| EVT-C13 | 2026-06-23T14:33:00.000Z | Malware Beaconing | 10.90.1.3 | 104.244.72.115 | N/A | CLOUD-INST-03 | High | |
| EVT-A700 | 2026-07-09T05:00:00.000Z | Data Exfiltration | 10.70.1.1 | 198.51.100.77 | N/A | WKSTN-2001 | Critical | |
| EVT-A802 | 2026-07-11T14:40:00.000Z | Privilege Escalation | 10.10.2.44 | N/A | svcSQLBackup | DC-01 | Critical | |
| EVT-A911 | 2026-05-19T09:00:00.000Z | Data Exfiltration | 91.242.155.8 | 91.242.155.8 | N/A | STORAGE-GATEWAY | High | |
| EVT-B03 | 2026-07-13T02:01:00.000Z | Failed Login | 91.219.236.9 | N/A | customer_stuff4 | PORTAL-01 | Low | |
| EVT-B012 | 2026-07-13T02:04:00.000Z | Failed Login | 46.161.27.34 | N/A | customer_stuff13 | PORTAL-01 | Low | |
| EVT-B20 | 2026-07-13T02:09:30.000Z | Data Exfiltration | 46.161.27.34 | 46.161.27.34 | customer_stuff1 | PAYMENT-API | Critical | |
| EVT-B15 | 2026-07-13T02:09:40.000Z | Successful Login | 91.219.236.9 | N/A | customer_stuff6 | PORTAL-01 | High | |
| EVT-A800 | 2026-07-11T14:00:00.000Z | Brute Force Attempt | 10.10.2.44 | N/A | hmartin | DC-01 | High | |
| EVT-B018 | 2026-07-13T02:06:00.000Z | Failed Login | 46.161.27.34 | N/A | customer_stuff19 | PORTAL-01 | Low | |
| EVT-B023 | 2026-07-13T02:07:40.000Z | Failed Login | 91.219.236.9 | N/A | customer_stuff24 | PORTAL-01 | Low | |
| EVT-B12 | 2026-07-13T02:08:40.000Z | Successful Login | 46.161.27.34 | N/A | customer_stuff3 | PORTAL-01 | High | |
| EVT-A910 | 2026-05-04T09:00:00.000Z | Data Exfiltration | 185.234.219.14 | 185.234.219.14 | N/A | STORAGE-GATEWAY | High | |
| EVT-B02 | 2026-07-13T02:00:40.000Z | Failed Login | 46.161.27.34 | N/A | customer_stuff3 | PORTAL-01 | Low | |
| EVT-B013 | 2026-07-13T02:04:20.000Z | Failed Login | 91.219.236.9 | N/A | customer_stuff14 | PORTAL-01 | Low | |
| EVT-C16 | 2026-06-23T14:36:00.000Z | Malware Beaconing | 10.90.1.6 | 104.244.72.115 | N/A | CLOUD-INST-06 | High | |
| EVT-B07 | 2026-07-13T02:02:20.000Z | Failed Login | 91.219.236.9 | N/A | customer_stuff8 | PORTAL-01 | Low | |
| EVT-B24 | 2026-07-13T02:10:50.000Z | Data Exfiltration | 46.161.27.34 | 46.161.27.34 | customer_stuff5 | PAYMENT-API | Critical | |
| EVT-B26 | 2026-07-13T02:11:30.000Z | Data Exfiltration | 46.161.27.34 | 46.161.27.34 | customer_stuff7 | PAYMENT-API | Critical | |
| EVT-C11 | 2026-06-23T14:31:00.000Z | Malware Beaconing | 10.90.1.1 | 104.244.72.115 | N/A | CLOUD-INST-01 | High | |
| EVT-C12 | 2026-06-23T14:32:00.000Z | Malware Beaconing | 10.90.1.2 | 104.244.72.115 | N/A | CLOUD-INST-02 | High | |
| EVT-C17 | 2026-06-23T14:37:00.000Z | Malware Beaconing | 10.90.1.7 | 104.244.72.115 | N/A | CLOUD-INST-07 | High | |
| EVT-A900 | 2026-04-14T09:00:00.000Z | Successful Login | 10.80.4.6 | N/A | fyang | S3-CORP-BACKUP-2024 | Low | |
| EVT-B017 | 2026-07-13T02:05:40.000Z | Failed Login | 91.219.236.9 | N/A | customer_stuff18 | PORTAL-01 | Low | |
| EVT-B022 | 2026-07-13T02:07:20.000Z | Failed Login | 46.161.27.34 | N/A | customer_stuff23 | PORTAL-01 | Low | |
| EVT-B25 | 2026-07-13T02:11:10.000Z | Data Exfiltration | 91.219.236.9 | 91.219.236.9 | customer_stuff6 | PAYMENT-API | Critical |