login history by computer - d2oc0ihd6a5bt.cloudfront.net · login history by computer security...
TRANSCRIPT
CONFIDENTIALITY NOTE: The information contained in this report document is for the exclusive use of the client specified above and may contain confidential, privileged and non-disclosable information. If the recipient of this report is not the client or addressee, such recipient is strictly prohibited from reading, photocopying, distributing or otherwise using this report or its contents in any way. Scan Date: 4/1/2014
Security Assessment
Prepared for: Sample Company, Inc. Prepared by: EMD Networking Services, Inc. 1/15/2016
Login History by Computer
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 2 of 73
Table of Contents
1 - Domain: Corp.MyCo.com
1.1 - BKRICKEY-WIN7 1.2 - DAVIS-XP 1.3 - DC01 1.4 - DC02 1.5 - DC03 1.6 - DEV_2012-CORE 1.7 - DEVTFS 1.8 - DEVWIKI 1.9 - FILE2012-1 1.10 - GENAVE-PC 1.11 - HV01 1.12 - HV02 1.13 - HV03 1.14 - HV04 1.15 - HV05 1.16 - INSP-TEST2 1.17 - JAGA 1.18 - JIM-WIN7 1.19 - JIM-WIN8 1.20 - JOES-PC 1.21 - MARKETING-1 1.22 - MELKINS-HP 1.23 - MmayhemON1 1.24 - MWEST-WIN864 1.25 - MYCO-ATL-CORE 1.26 - MYCO30DEV 1.27 - MYCOROOTAUTH 1.28 - OPS001 1.29 - PKWin8 1.30 - PSIMPSON-WIN764 1.31 - PSIMPSON-WIN7TEST 1.32 - PSIMPSON1 1.33 - RANCOR 1.34 - SE-DAVIS 1.35 - SHAREPOINT-01 1.36 - SLOWE-WIN8 1.37 - SQL2012-01 1.38 - STORAGE01 1.39 - TANDEM 1.40 - UTIL01 1.41 - UTIL12
2 - Domain: No Domain 2.1 - slowe-win7.corp.MyCo.com
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 3 of 73
1 - Domain: Corp.MyCo.com
1.1 - BKRICKEY-WIN7
Windows 7 Enterprise DNS Names(s) bkrickey-win7.corp.myco.com IP Address(es) 10.0.7.74
Interactive Logon (logon at keyboard and screen of system)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\BKRICKEY 12 0 2 0 1 0
Remote Interactive Logon (Terminal Services, Remote Desktop, or Remote Assistance)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\BKRICKEY 25 0 6 0 1 0
Network Logon (logon for remote access to a system resource, such as a shared folder)
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 4 of 73
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\BKRICKEY-WIN7$ 481 0 147 0 34 0 PIT\mparish 166 0 134 0 0 0 PIT\Administrator 108 0 45 0 37 0 PIT\UTIL01$ 73 0 22 0 3 0 PIT\BKRICKEY 47 0 13 0 2 0 PIT\pSIMPSON 45 0 40 0 6 0 PIT\gHAMMOND 42 0 42 0 0 0 PIT\wparson 22 0 7 0 7 0 PIT\JDAVIS 15 0 0 0 0 0 PIT\mSUMMER 11 0 11 0 11 0 NT AUTHORITY\ANONYMOUS LOGON 9 0 1 0 0 0 PIT\sRammond 7 0 0 0 0 0
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 5 of 73
1.2 - DAVIS-XP
Windows XP Professional DNS Names(s) davis-xp.corp.myco.com, ops001.corp.myco.com, qb02.corp.myco.com IP Address(es) 10.0.7.10
Interactive Logon (logon at keyboard and screen of system)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\sRammond 38 0 20 0 2 0 Window Manager\DWM-2 22 0 8 0 0 0 Window Manager\DWM-1 16 0 0 0 0 0 Window Manager\DWM-3 12 0 10 0 0 0
Remote Interactive Logon (Terminal Services, Remote Desktop, or Remote Assistance)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\sRammond 2 0 0 0 0 0
Network Logon (logon for remote access to a system resource, such as a shared folder)
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 6 of 73
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\OPS001$ 369 0 139 0 36 0 PIT\mparish 289 0 119 0 0 0 PIT\Administrator 111 0 58 0 47 0 PIT\gHAMMOND 76 0 76 0 0 0 PIT\pSIMPSON 32 0 32 0 5 0 PIT\wparson 29 0 9 0 9 0 PIT\kjacobs 17 0 0 0 0 0 PIT\mSUMMER 17 0 17 0 17 0 PIT\JDAVIS 15 0 0 0 0 0 NT AUTHORITY\ANONYMOUS LOGON 6 0 0 0 0 0
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 7 of 73
1.3 - DC01
Windows Server 2012 Standard DNS Names(s) dc01.corp.myco.com, corp.myco.com IP Address(es) fe80::c479:f74:16d0:1a95%16,172.20.1.3,10.0.1.3
Interactive Logon (logon at keyboard and screen of system)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure Window Manager\DWM-3 2 0 2 0 2 0
Remote Interactive Logon (Terminal Services, Remote Desktop, or Remote Assistance)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\wparson 2 0 2 0 2 0
Network Logon (logon for remote access to a system resource, such as a shared folder)
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 8 of 73
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\pSIMPSON 6271 0 6271 0 6271 0 PIT\DC01$ 3610 0 3610 0 3610 0 PIT\DC03$ 2046 0 2046 0 2046 0 PIT\DC02$ 1789 0 1789 0 1789 0 PIT\STORAGE01$ 1538 0 1538 0 1538 0 PIT\Pkrickey 241 0 241 0 241 0 PIT\mELKINS 234 0 234 0 234 0 PIT\HV03$ 199 0 199 0 199 0 PIT\JAGA$ 171 0 171 0 171 0 DEV\DEV1DC1$ 150 0 150 0 150 0 PIT\MWEST-WIN864$ 150 0 150 0 150 0 PIT\JDAVIS 143 0 143 0 143 0 PIT\MYCO-ATL-CORE$ 142 0 142 0 142 0 PIT\HV02$ 141 0 141 0 141 0 PIT\Administrator 138 0 138 0 138 0 PIT\PSIMPSON1$ 138 0 138 0 138 0 PIT\PABUILD$ 127 0 127 0 127 0 PIT\JOES-PC$ 120 0 120 0 120 0 PIT\mmayhemON 119 0 119 0 119 0 PIT\MmayhemON-HP$ 118 0 118 0 118 0 PIT\REMOTE$ 98 0 98 0 98 0 PIT\MYCOROOTAUTH$ 97 0 97 0 97 0 PIT\BKRICKEY-WIN7$ 96 0 96 0 96 0 PIT\JIM-WIN7$ 93 0 93 0 93 0 PIT\SHAREPOINT-01$ 90 0 90 0 90 0 PIT\PSIMPSON-WIN764$ 88 0 88 0 88 0 PIT\DEVTFS$ 84 0 84 0 84 0 PIT\OPS001$ 84 0 84 0 84 0 PIT\FT-LENOVO$ 82 0 82 0 82 0 PIT\MSUMMER-LT$ 82 0 82 0 82 0 PIT\MELKINS-HP$ 81 0 81 0 81 0 PIT\FILE2012-1$ 79 0 79 0 79 0 PIT\JIM-WIN8$ 78 0 78 0 78 0 PIT\DEV_2012-CORE$ 78 0 78 0 78 0 PIT\PKWIN8$ 72 0 72 0 72 0 PIT\UTIL12$ 69 0 69 0 69 0 PIT\DEVWIKI$ 61 0 61 0 61 0 PIT\SharePointSQL 60 0 60 0 60 0 PIT\REX$ 60 0 60 0 60 0
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 9 of 73
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\SE-DAVIS$ 56 0 56 0 56 0 PIT\HV04$ 56 0 56 0 56 0 PIT\rphillis 54 0 54 0 54 0 PIT\eHAMMOND 48 0 48 0 48 0 NT AUTHORITY\ANONYMOUS LOGON 48 0 48 0 48 0 PIT\mparish 44 0 44 0 44 0 PIT\HV01$ 39 0 39 0 39 0 PIT\BKRICKEY 36 0 36 0 36 0 PIT\SLOWE-WIN8$ 35 0 35 0 35 0 PIT\mSUMMER 35 0 35 0 35 0 PIT\PSIMPSON-WIN7TEST$ 33 0 33 0 33 0 PIT\MARKETING-1$ 32 0 32 0 32 0 PIT\sRammond 30 0 30 0 30 0 PIT\wparson 27 0 27 0 27 0 PIT\SLOWE-WIN7$ 26 0 26 0 26 0 PIT\ISA1$ 25 0 25 0 25 0 PIT\MmayhemON1$ 17 0 17 0 17 0 PIT\MYCO30DEV$ 11 0 11 0 11 0 PIT\USER-PC23$ 10 0 10 0 10 0 PIT\thughes 10 0 10 0 10 0 PIT\SQL2012-01$ 10 0 10 0 10 0 PIT\rjohnson 9 0 9 0 9 0 PIT\TANDEM$ 9 0 9 0 9 0 PIT\UTIL01$ 7 0 7 0 7 0 PIT\slowe 5 0 5 0 5 0 PIT\tholmes 5 0 5 0 5 0 itc_domain\itc_test 0 5 0 5 0 5 MicrosoftAccount\[email protected] 0 2 0 2 0 2
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 10 of 73
1.4 - DC02
Windows Server 2012 R2 Datacenter DNS Names(s) dc02.corp.myco.com, corp.myco.com IP Address(es) 172.20.0.4,10.0.1.4
Network Logon (logon for remote access to a system resource, such as a shared folder)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\DC02$ 6861 0 6861 0 6479 0 PIT\UTIL01$ 3505 0 3505 0 3322 0 PIT\DC01$ 1853 0 1853 0 1768 0 PIT\STORAGE01$ 448 0 448 0 430 0 PIT\SQL2012-01$ 358 0 358 0 332 0 PIT\pSIMPSON 336 0 336 0 307 0 PIT\Administrator 331 0 331 0 316 0 PIT\Pkrickey 324 0 324 0 304 0 PIT\SLOWE-WIN7$ 282 0 282 0 277 0 PIT\JDAVIS 269 0 269 0 247 0 PIT\DEVWIKI$ 248 0 248 0 234 0 PIT\JIM-WIN7$ 238 0 238 0 222 0 PIT\SLOWE-WIN8$ 237 0 237 0 233 0 PIT\PKWIN8$ 230 0 230 0 218 0 PIT\TANDEM$ 222 0 222 0 204 0 PIT\MELKINS-HP$ 221 0 221 0 204 0 PIT\MYCOROOTAUTH$ 205 0 205 0 186 0 PIT\SHAREPOINT-01$ 200 0 200 0 183 0 PIT\MmayhemON-HP$ 187 0 187 0 168 0 PIT\DC03$ 187 0 187 0 177 0 PIT\UTIL12$ 183 0 183 0 183 0 PIT\DEV_2012-CORE$ 171 0 171 0 171 0 PIT\mELKINS 170 0 170 0 168 0 PIT\HV04$ 166 0 166 0 149 0 PIT\REMOTE$ 160 0 160 0 144 0 PIT\SE-DAVIS$ 160 0 160 0 144 0 PIT\PSIMPSON-WIN7TEST$ 159 0 159 0 137 0 PIT\FILE2012-1$ 154 0 154 0 137 0 PIT\JIM-WIN8$ 147 0 147 0 131 0
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 11 of 73
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\RANCOR$ 147 0 147 0 130 0 PIT\mparish 141 0 141 0 138 0 PIT\eHAMMOND 140 0 140 0 136 0 PIT\mmayhemON 131 0 131 0 131 0 PIT\wparson 130 0 130 0 118 0 PIT\PSIMPSON-WIN764$ 130 0 130 0 112 0 PIT\MYCO30DEV$ 121 0 121 0 95 0 PIT\SharePointSQL 119 0 119 0 109 0 PIT\DEVTFS$ 115 0 115 0 106 0 PIT\MARKETING-1$ 112 0 112 0 112 0 PIT\REX$ 109 0 109 0 104 0 PIT\JOES-PC$ 99 0 99 0 81 0 PIT\thughes 93 0 93 0 84 0 PIT\rjohnson 90 0 90 0 90 0 PIT\PSIMPSON1$ 84 0 84 0 84 0 PIT\HV02$ 79 0 79 0 79 0 PIT\rphillis 79 0 79 0 72 0 PIT\MSUMMER-LT$ 72 0 72 0 72 0 PIT\MWEST-WIN864$ 59 0 59 0 58 0 PIT\HV05$ 57 0 57 0 57 0 PIT\PABUILD$ 54 0 54 0 44 0 PIT\mSUMMER 54 0 54 0 54 0 NT AUTHORITY\ANONYMOUS LOGON 52 0 52 0 52 0 PIT\BKRICKEY-WIN7$ 46 0 46 0 44 0 PIT\BKRICKEY 44 0 44 0 42 0 PIT\HV01$ 43 0 43 0 40 0 PIT\HV03$ 30 0 30 0 26 0 PIT\MmayhemON1$ 30 0 30 0 30 0 PIT\MYCO-ATL-CORE$ 28 0 28 0 27 0 PIT\ISA1$ 27 0 27 0 26 0 PIT\tholmes 26 0 26 0 26 0 DEV\DEV1DC1$ 17 0 17 0 16 0 PIT\OPS001$ 11 0 11 0 11 0 PIT\sRammond 7 0 7 0 7 0 PIT\GHAMMOND-LT$ 5 0 5 0 5 0 PIT\USER-PC23$ 5 0 5 0 5 0 PIT\FT-LENOVO$ 5 0 5 0 5 0 PIT\gHAMMOND 1 0 1 0 1 0 itc_domain\itc_test 0 10 0 10 0 9
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 12 of 73
1.5 - DC03
Windows Server 2012 R2 Datacenter DNS Names(s) dc03.corp.myco.com, corp.myco.com IP Address(es) 172.20.0.23
Network Logon (logon for remote access to a system resource, such as a shared folder)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\DC03$ 18175 0 18175 0 6076 0 PIT\UTIL01$ 870 0 870 0 303 0 PIT\DC01$ 831 0 831 0 293 0 PIT\DC02$ 829 0 829 0 281 0 PIT\Administrator 143 0 143 0 123 0 PIT\wparson 15 0 15 0 15 0
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 13 of 73
1.6 - DEV_2012-CORE
Hyper-V Server 2012 DNS Names(s) dev_2012-core.corp.myco.com, exchange2013.corp.myco.com, jamie-pc.corp.myco.com IP Address(es) 10.0.7.53
Network Logon (logon for remote access to a system resource, such as a shared folder)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\JDAVIS 11012 0 5601 0 1353 0 PIT\DEV_2012-CORE$ 284 0 141 0 33 0 PIT\mparish 192 0 93 0 0 0 PIT\Administrator 51 0 38 0 30 0 PIT\gHAMMOND 41 0 41 0 0 0 PIT\pSIMPSON 36 0 36 0 4 0 PIT\wparson 22 0 9 0 9 0 PIT\mSUMMER 9 0 9 0 9 0
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 14 of 73
1.7 - DEVTFS
Windows Server 2012 Standard DNS Names(s) devtfs.corp.myco.com IP Address(es) 10.0.7.69
Interactive Logon (logon at keyboard and screen of system)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\Pkrickey 4 0 2 0 0 0 Window Manager\DWM-2 4 0 2 0 0 0 Window Manager\DWM-1 2 0 2 0 0 0
Network Logon (logon for remote access to a system resource, such as a shared folder)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\Administrator 1396 0 353 0 145 0 PIT\mparish 580 0 232 0 82 0 PIT\DEVTFS$ 534 0 144 0 38 0 PIT\wparson 493 0 133 0 86 0 PIT\thughes 433 0 182 0 90 0 PIT\rphillis 254 5 89 5 34 0 PIT\gHAMMOND 38 0 38 0 0 0 PIT\pSIMPSON 28 0 23 0 4 0 PIT\JDAVIS 25 0 0 0 0 0 PIT\sRammond 8 0 0 0 0 0
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 15 of 73
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\mSUMMER 7 0 7 0 7 0 NT AUTHORITY\ANONYMOUS LOGON 1 0 1 0 0 0 PIT\kjacobs 1 0 0 0 0 0
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 16 of 73
1.8 - DEVWIKI
Windows Server 2003 DNS Names(s) devwiki.corp.myco.com IP Address(es) 10.0.7.62
Interactive Logon (logon at keyboard and screen of system)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\administrator 2 0 0 0 0 0
Remote Interactive Logon (Terminal Services, Remote Desktop, or Remote Assistance)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\administrator 2 0 0 0 0 0
Network Logon (logon for remote access to a system resource, such as a shared folder)
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 17 of 73
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\DEVWIKI$ 392 0 108 0 27 0 PIT\mparish 210 0 81 0 0 0 PIT\Pkrickey 165 0 35 0 11 0 N/A 154 0 1 0 1 0 PIT\Administrator 124 0 30 0 24 0 PIT\pSIMPSON 34 0 29 0 3 0 PIT\wparson 31 0 12 0 12 0 PIT\gHAMMOND 30 0 30 0 0 0 PIT\JDAVIS 16 0 0 0 0 0 PIT\mSUMMER 7 0 7 0 7 0 PIT\sRammond 7 0 0 0 0 0
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 18 of 73
1.9 - FILE2012-1
Windows Server 2012 R2 Standard DNS Names(s) file2012-1.corp.myco.com, store2012-1.corp.myco.com IP Address(es) 10.0.1.41
Interactive Logon (logon at keyboard and screen of system)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure Window Manager\DWM-1 6 0 6 0 0 0 Window Manager\DWM-2 4 0 4 0 0 0 Window Manager\DWM-3 2 0 2 0 0 0 WIN-24153KHHLBO\Administrator 1 0 1 0 0 0
Remote Interactive Logon (Terminal Services, Remote Desktop, or Remote Assistance)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\pkrickey 6 0 6 0 0 0
Network Logon (logon for remote access to a system resource, such as a shared folder)
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 19 of 73
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\Administrator 129 0 129 0 129 0 PIT\FILE2012-1$ 78 0 78 0 34 0 PIT\gHAMMOND 11 0 11 0 0 0 PIT\wparson 9 0 9 0 9 0 PIT\mSUMMER 6 0 6 0 6 0 PIT\pSIMPSON 5 0 5 0 5 0 PIT\Pkrickey 4 0 4 0 0 0 NT AUTHORITY\ANONYMOUS LOGON 3 0 3 0 0 0 itc_domain\itc_test 0 19 0 19 0 9
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 20 of 73
1.10 - GENAVE-PC
Windows 8.1 Pro DNS Names(s) genave-pc IP Address(es) fe80::b5a0:130e:57f:ce68%3,10.0.6.114
Interactive Logon (logon at keyboard and screen of system)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure GENAVE-PC\Genave 90 0 12 0 6 0 Window Manager\DWM-1 22 0 16 0 14 0 Window Manager\DWM-2 4 0 2 0 2 0 Window Manager\DWM-3 2 0 0 0 0 0
Network Logon (logon for remote access to a system resource, such as a shared folder)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure NT AUTHORITY\ANONYMOUS LOGON 13 0 8 0 7 0
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 21 of 73
1.11 - HV01
Windows Server 2012 R2 Standard DNS Names(s) hv01.corp.myco.com IP Address(es) 10.0.1.111
Interactive Logon (logon at keyboard and screen of system)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure Window Manager\DWM-3 4 0 4 0 4 0
Remote Interactive Logon (Terminal Services, Remote Desktop, or Remote Assistance)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\administrator 2 0 2 0 2 0
Network Logon (logon for remote access to a system resource, such as a shared folder)
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 22 of 73
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\pSIMPSON 5628 0 5628 0 3075 0 PIT\Pkrickey 2475 0 2475 0 1352 0 PIT\JDAVIS 2475 0 2475 0 1352 0 PIT\Administrator 64 0 64 0 64 0 PIT\HV01$ 60 0 60 0 33 0 PIT\mSUMMER 9 0 9 0 9 0 PIT\wparson 6 0 6 0 6 0 itc_domain\itc_test 0 16 0 16 0 9
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 23 of 73
1.12 - HV02
Windows Server 2012 R2 Standard DNS Names(s) hv02.corp.myco.com, corp.myco.com IP Address(es) 10.0.7.27
Network Logon (logon for remote access to a system resource, such as a shared folder)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\pSIMPSON 6138 0 6138 0 2902 0 PIT\HV01$ 2895 0 2895 0 1367 0 PIT\Pkrickey 1553 0 1553 0 734 0 PIT\HV02$ 73 0 73 0 34 0 PIT\Administrator 69 0 69 0 69 0 PIT\gHAMMOND 18 0 18 0 1 0 PIT\wparson 17 0 17 0 17 0 PIT\SLOWE-WIN7$ 8 0 8 0 4 0 PIT\mSUMMER 8 0 8 0 8 0 PIT\MmayhemON-HP$ 6 0 6 0 6 0 PIT\rphillis 1 0 1 0 1 0 PIT\mmayhemON 1 0 1 0 1 0 itc_domain\itc_test 0 19 0 19 0 9
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 24 of 73
1.13 - HV03
Windows Server 2012 Standard DNS Names(s) hv03.corp.myco.com IP Address(es) 10.0.1.139,10.0.1.131,10.0.1.135,10.0.1.132
Network Logon (logon for remote access to a system resource, such as a shared folder)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\HV02$ 8219 0 8219 0 8219 0 PIT\HV01$ 4017 0 4017 0 4017 0 PIT\HV04$ 2817 0 2817 0 2817 0 PIT\Pkrickey 1313 0 1313 0 1313 0 PIT\JDAVIS 1313 0 1313 0 1313 0 PIT\Administrator 355 0 355 0 355 0 PIT\HV03$ 31 0 31 0 31 0 PIT\mSUMMER 12 0 12 0 12 0 PIT\wparson 9 0 9 0 9 0 itc_domain\itc_test 0 54 0 54 0 54
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 25 of 73
1.14 - HV04
Windows Server 2012 Standard DNS Names(s) hv04.corp.myco.com IP Address(es) 10.0.1.141,10.0.1.149,10.0.1.142,10.0.1.145
Network Logon (logon for remote access to a system resource, such as a shared folder)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\HV01$ 3978 0 3978 0 3978 0 PIT\DEV_2012-CORE$ 3209 0 3209 0 3209 0 PIT\pSIMPSON 3156 0 3156 0 3156 0 PIT\HV03$ 3003 0 3003 0 3003 0 PIT\HV02$ 2602 0 2602 0 2602 0 PIT\Pkrickey 1068 0 1068 0 1068 0 PIT\Administrator 352 0 352 0 352 0 PIT\HV04$ 39 0 39 0 39 0 PIT\wparson 10 0 10 0 10 0 itc_domain\itc_test 0 42 0 42 0 42
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 26 of 73
1.15 - HV05
Windows Server 2012 R2 Standard DNS Names(s) hv05.corp.myco.com, mycodemo.corp.myco.com IP Address(es) 10.0.7.61
Interactive Logon (logon at keyboard and screen of system)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure Window Manager\DWM-2 4 0 0 0 0 0 Window Manager\DWM-3 4 0 2 0 0 0 PIT\Pkrickey 2 0 2 0 0 0
Remote Interactive Logon (Terminal Services, Remote Desktop, or Remote Assistance)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\mparish 2 0 0 0 0 0 PIT\pkrickey 2 0 0 0 0 0 PIT\administrator 1 0 0 0 0 0
Network Logon (logon for remote access to a system resource, such as a shared folder)
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 27 of 73
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\HV05$ 536 0 138 0 33 0 PIT\Administrator 361 0 119 0 96 0 PIT\Pkrickey 304 0 291 0 0 0 PIT\mparish 265 0 57 0 0 0 PIT\wparson 45 0 13 0 13 0 PIT\gHAMMOND 35 0 35 0 0 0 PIT\pSIMPSON 28 0 23 0 4 0 PIT\JDAVIS 20 0 0 0 0 0 PIT\mSUMMER 11 0 11 0 11 0 PIT\sRammond 7 0 0 0 0 0 PIT\UTIL12$ 2 0 0 0 0 0 itc_domain\itc_test 0 91 0 37 0 9
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 28 of 73
1.16 - INSP-TEST2
Windows 8 Pro DNS Names(s) insp-test2 IP Address(es) fe80::a986:b7c5:9e69:edb2%22,fe80::7005:2386:c652:a9a6%20,169.254.56.1,10.0.6.109
Network Logon (logon for remote access to a system resource, such as a shared folder)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure INSP-TEST2\ubuntu 20253 0 20253 0 20253 0
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 29 of 73
1.17 - JAGA
Windows Server 2003 DNS Names(s) jaga.corp.myco.com, mycodemo.corp.myco.com IP Address(es) 10.0.7.67
Network Logon (logon for remote access to a system resource, such as a shared folder)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\JAGA$ 417 0 110 0 26 0 N/A 115 0 3 0 3 0 PIT\Administrator 100 0 30 0 24 0 PIT\mparish 36 0 19 0 0 0 PIT\gHAMMOND 33 0 33 0 0 0 PIT\pSIMPSON 27 0 22 0 3 0 PIT\wparson 17 0 5 0 5 0 PIT\JDAVIS 15 0 0 0 0 0 JAGA\IUSR_JAGA 8 0 1 0 0 0 PIT\sRammond 8 0 0 0 0 0 PIT\mSUMMER 7 0 7 0 7 0
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 30 of 73
1.18 - JIM-WIN7
Windows 7 Enterprise DNS Names(s) jim-win7.corp.myco.com IP Address(es) 10.0.7.63
Remote Interactive Logon (Terminal Services, Remote Desktop, or Remote Assistance)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\jDAVIS 12 0 0 0 0 0 PIT\administrator 2 0 1 0 0 0
Network Logon (logon for remote access to a system resource, such as a shared folder)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\JIM-WIN7$ 536 0 140 0 32 0 PIT\mparish 202 0 131 0 0 0 PIT\Administrator 124 0 36 0 29 0 PIT\JDAVIS 98 0 70 0 70 0 JIM-WIN7\WhatsUpGold_User 45 0 10 0 5 0 PIT\gHAMMOND 38 0 38 0 0 0 PIT\pSIMPSON 34 0 29 0 4 0 PIT\wparson 24 0 9 0 9 0 PIT\sRammond 9 0 0 0 0 0 PIT\mSUMMER 7 0 7 0 7 0 PIT\kjacobs 2 0 0 0 0 0
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 31 of 73
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\DC01$ 1 0 0 0 0 0
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 32 of 73
1.19 - JIM-WIN8
Windows 8.1 Enterprise DNS Names(s) jim-win8.corp.myco.com IP Address(es) 10.0.7.44
Interactive Logon (logon at keyboard and screen of system)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\jDAVIS 94 0 38 0 16 0 Window Manager\DWM-3 52 0 0 0 0 0 Window Manager\DWM-1 34 0 0 0 0 0 Window Manager\DWM-4 24 0 20 0 6 0 Window Manager\DWM-5 14 0 12 0 2 0 Window Manager\DWM-2 2 0 0 0 0 0 PIT\mDAVIS 1 0 0 0 0 0
Remote Interactive Logon (Terminal Services, Remote Desktop, or Remote Assistance)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\JDAVIS 110 0 30 0 8 0
Network Logon (logon for remote access to a system resource, such as a shared folder)
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 33 of 73
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\JIM-WIN8$ 604 0 160 0 37 0 PIT\mparish 176 0 110 0 0 0 PIT\JDAVIS 126 0 18 0 6 0 PIT\Administrator 117 0 37 0 30 0 PIT\gHAMMOND 44 0 44 0 0 0 PIT\pSIMPSON 31 0 26 0 3 0 PIT\wparson 24 0 9 0 9 0 PIT\mSUMMER 11 0 11 0 11 0 NT AUTHORITY\ANONYMOUS LOGON 1 0 0 0 0 0
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 34 of 73
1.20 - JOES-PC
Windows 8 Enterprise DNS Names(s) joes-pc.corp.myco.com IP Address(es) 10.0.7.90
Interactive Logon (logon at keyboard and screen of system)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure Window Manager\DWM-1 2 0 0 0 0 0
Network Logon (logon for remote access to a system resource, such as a shared folder)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\JOES-PC$ 558 0 144 0 35 0 PIT\mparish 181 0 107 0 0 0 PIT\Administrator 125 0 54 0 44 0 PIT\wparson 53 0 23 0 23 0 PIT\pSIMPSON 38 0 33 0 4 0 PIT\gHAMMOND 36 0 36 0 0 0 PIT\JDAVIS 25 0 0 0 0 0 PIT\mSUMMER 10 0 10 0 10 0 PIT\sRammond 7 0 0 0 0 0 NT AUTHORITY\ANONYMOUS LOGON 1 0 0 0 0 0
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 35 of 73
1.21 - MARKETING-1
Windows 7 Enterprise DNS Names(s) marketing-1.corp.myco.com IP Address(es) 10.0.7.29
Interactive Logon (logon at keyboard and screen of system)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\rjohnson 33 0 11 0 4 0 PIT\eHAMMOND 2 0 0 0 0 0
Network Logon (logon for remote access to a system resource, such as a shared folder)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure NT AUTHORITY\ANONYMOUS LOGON 1257 0 0 0 0 0 PIT\MARKETING-1$ 482 0 147 0 36 0 PIT\mparish 183 0 107 0 0 0 PIT\Administrator 86 0 41 0 33 0 PIT\gHAMMOND 43 0 43 0 0 0 Marketing-1\UpdatusUser 31 0 8 0 2 0 PIT\pSIMPSON 31 0 26 0 5 0 PIT\wparson 22 0 8 0 8 0 PIT\JDAVIS 16 0 0 0 0 0 PIT\mSUMMER 7 0 7 0 7 0 PIT\kjacobs 7 0 0 0 0 0
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 36 of 73
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\DHAROLD-PC$ 1 0 0 0 0 0
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 37 of 73
1.22 - MELKINS-HP
Windows 8 Enterprise DNS Names(s) melkins-hp.corp.myco.com IP Address(es) 10.0.7.26
Interactive Logon (logon at keyboard and screen of system)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\mELKINS 84 0 26 0 10 0 Window Manager\DWM-1 14 0 2 0 0 0 Window Manager\DWM-2 2 0 0 0 0 0
Remote Interactive Logon (Terminal Services, Remote Desktop, or Remote Assistance)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\mELKINS 4 0 0 0 0 0
Network Logon (logon for remote access to a system resource, such as a shared folder)
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 38 of 73
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\MELKINS-HP$ 462 0 138 0 34 0 PIT\mparish 172 0 106 0 0 0 PIT\Administrator 123 0 50 0 40 0 PIT\wparson 59 0 29 0 29 0 PIT\gHAMMOND 43 0 43 0 0 0 PIT\pSIMPSON 29 0 24 0 5 0 PIT\JDAVIS 26 0 0 0 0 0 PIT\mSUMMER 11 0 11 0 11 0 NT AUTHORITY\ANONYMOUS LOGON 10 0 1 0 0 0 PIT\kjacobs 6 0 0 0 0 0 PIT\Pkrickey 2 0 0 0 0 0 PIT\DHAROLD-PC$ 1 0 0 0 0 0
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 39 of 73
1.23 - MmayhemON1
Windows Vista Business DNS Names(s) mmayhemon1.corp.myco.com IP Address(es) 10.0.7.31
Interactive Logon (logon at keyboard and screen of system)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\mmayhemON 193 0 60 0 20 0
Network Logon (logon for remote access to a system resource, such as a shared folder)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\MmayhemON1$ 548 0 139 0 33 0 PIT\mparish 183 0 109 0 0 0 PIT\Administrator 152 0 45 0 36 0 PIT\gHAMMOND 47 0 47 0 0 0 PIT\wparson 43 0 15 0 15 0 PIT\pSIMPSON 32 0 27 0 4 0 PIT\JDAVIS 20 0 0 0 0 0 PIT\mSUMMER 9 0 9 0 9 0 NT AUTHORITY\ANONYMOUS LOGON 1 0 0 0 0 0
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 40 of 73
1.24 - MWEST-WIN864
Windows 8 Enterprise DNS Names(s) mwest-win864.corp.myco.com IP Address(es) 10.0.7.11
Interactive Logon (logon at keyboard and screen of system)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\rphillis 94 0 34 0 10 0 Window Manager\DWM-2 46 0 24 0 2 0 Window Manager\DWM-3 8 0 2 0 0 0 Window Manager\DWM-4 2 0 0 0 0 0 Window Manager\DWM-1 2 0 0 0 0 0
Remote Interactive Logon (Terminal Services, Remote Desktop, or Remote Assistance)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\rphillis 22 0 8 0 0 0
Network Logon (logon for remote access to a system resource, such as a shared folder)
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 41 of 73
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\MWEST-WIN864$ 567 0 150 0 34 0 PIT\mparish 175 0 105 0 0 0 PIT\Administrator 98 0 35 0 28 0 PIT\rphillis 53 0 31 0 1 0 PIT\UTIL01$ 53 0 31 0 1 0 PIT\gHAMMOND 45 0 45 0 0 0 PIT\pSIMPSON 28 0 23 0 4 0 PIT\wparson 26 0 10 0 10 0 PIT\JDAVIS 14 0 0 0 0 0 PIT\mSUMMER 8 0 8 0 8 0 PIT\kjacobs 8 0 0 0 0 0 PIT\sRammond 7 0 0 0 0 0 NT AUTHORITY\ANONYMOUS LOGON 1 0 0 0 0 0 PIT\DHAROLD-PC$ 1 0 0 0 0 0
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 42 of 73
1.25 - MYCO-ATL-CORE
Windows Server 2003 DNS Names(s) myco-atl-core.corp.myco.com IP Address(es) 10.0.1.17
Network Logon (logon for remote access to a system resource, such as a shared folder)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\nrsdev 1448 0 379 0 92 0 PIT\Administrator 461 0 68 0 54 0 PIT\MYCO-ATL-CORE$ 409 0 108 0 27 0 PIT\mparish 232 0 107 0 0 0 N/A 86 0 1 0 1 0 PIT\sRammond 63 0 0 0 0 0 PIT\kjacobs 50 0 0 0 0 0 PIT\gHAMMOND 35 0 35 0 0 0 PIT\wparson 19 0 5 0 5 0 PIT\pSIMPSON 17 0 12 0 0 0 MYCO-ATL-CORE\IUSR_MYCO-ATL-CORE 17 0 7 0 4 0 PIT\JDAVIS 14 0 0 0 0 0 PIT\mSUMMER 6 0 6 0 6 0 PIT\mELKINS 1 0 0 0 0 0
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 43 of 73
1.26 - MYCO30DEV
Windows 2000 Server DNS Names(s) myco30dev.corp.myco.com IP Address(es) 10.0.7.65
Interactive Logon (logon at keyboard and screen of system)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure MYCO30DEV\Administrator 1 5 1 5 1 2 PIT\Pkrickey 1 0 1 0 0 0 PIT\Administrator 0 1 0 1 0 0
Network Logon (logon for remote access to a system resource, such as a shared folder)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\MYCO30DEV$ 446 0 115 0 29 0 PIT\mparish 80 0 56 0 50 0 PIT\Administrator 72 0 29 0 25 0 PIT\wparson 63 0 9 0 9 0 PIT\pSIMPSON 25 0 20 0 3 0 PIT\sRammond 21 0 3 0 0 0 PIT\gHAMMOND 20 0 20 0 0 0 PIT\JDAVIS 11 0 1 0 0 0 PIT\thughes 10 0 2 0 1 0 MYCO30DEV\IUSR_MYCO30DEV 10 0 2 0 1 0
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 44 of 73
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\mSUMMER 6 0 6 0 6 0 PIT\kjacobs 1 0 0 0 0 0
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 45 of 73
1.27 - MYCOROOTAUTH
Windows Server 2012 R2 Datacenter DNS Names(s) mycorootauth.corp.myco.com IP Address(es) 10.0.1.44
Network Logon (logon for remote access to a system resource, such as a shared folder)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\MYCOROOTAUTH$ 572 0 172 0 38 0 PIT\Administrator 306 0 134 0 107 0 PIT\mparish 117 0 55 0 0 0 PIT\wparson 33 0 9 0 9 0 PIT\gHAMMOND 32 0 32 0 0 0 PIT\JDAVIS 26 0 0 0 0 0 PIT\pSIMPSON 17 0 11 0 0 0 PIT\sRammond 7 0 0 0 0 0 PIT\PSIMPSON-WIN764$ 7 0 7 0 0 0 PIT\mSUMMER 5 0 5 0 5 0 itc_domain\itc_test 0 91 0 37 0 9
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 46 of 73
1.28 - OPS001
Windows 8 Enterprise DNS Names(s) ops001.corp.myco.com, davis-xp.corp.myco.com, qb02.corp.myco.com IP Address(es) 10.0.7.10
Interactive Logon (logon at keyboard and screen of system)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\sRammond 38 0 20 0 2 0 Window Manager\DWM-2 22 0 8 0 0 0 Window Manager\DWM-1 16 0 0 0 0 0 Window Manager\DWM-3 12 0 10 0 0 0
Remote Interactive Logon (Terminal Services, Remote Desktop, or Remote Assistance)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\sRammond 2 0 0 0 0 0
Network Logon (logon for remote access to a system resource, such as a shared folder)
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 47 of 73
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\OPS001$ 369 0 139 0 36 0 PIT\mparish 289 0 119 0 0 0 PIT\Administrator 111 0 58 0 47 0 PIT\gHAMMOND 76 0 76 0 0 0 PIT\wparson 39 0 19 0 19 0 PIT\pSIMPSON 32 0 32 0 5 0 PIT\kjacobs 17 0 0 0 0 0 PIT\mSUMMER 17 0 17 0 17 0 PIT\JDAVIS 15 0 0 0 0 0 NT AUTHORITY\ANONYMOUS LOGON 6 0 0 0 0 0
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 48 of 73
1.29 - PKWin8
Windows 8.1 Pro DNS Names(s) pkwin8.corp.myco.com IP Address(es) 10.0.7.54
Interactive Logon (logon at keyboard and screen of system)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure Window Manager\DWM-2 8 0 0 0 0 0 Window Manager\DWM-1 8 0 0 0 0 0 PIT\pkrickey 2 0 0 0 0 0 PKWin8\User 2 0 0 0 0 0 Window Manager\DWM-3 2 0 0 0 0 0
Remote Interactive Logon (Terminal Services, Remote Desktop, or Remote Assistance)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\pkrickey 8 0 0 0 0 0
Network Logon (logon for remote access to a system resource, such as a shared folder)
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 49 of 73
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\PKWIN8$ 538 0 147 0 36 0 PIT\Administrator 131 0 49 0 40 0 PIT\mparish 109 0 55 0 0 0 PIT\wparson 46 0 14 0 14 0 PIT\gHAMMOND 31 0 31 0 0 0 PIT\pSIMPSON 27 0 22 0 5 0 PIT\JDAVIS 23 0 0 0 0 0 PIT\mSUMMER 11 0 11 0 11 0 PIT\Pkrickey 8 0 0 0 0 0 PIT\UTIL01$ 7 0 0 0 0 0 PIT\sRammond 5 0 0 0 0 0 NT AUTHORITY\ANONYMOUS LOGON 4 0 0 0 0 0
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 50 of 73
1.30 - PSIMPSON-WIN764
Windows 8.1 Enterprise DNS Names(s) psimpson-win764.corp.myco.com IP Address(es) 10.0.7.18
Interactive Logon (logon at keyboard and screen of system)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\pSIMPSON 276 0 90 0 32 0 Window Manager\DWM-1 18 0 8 0 2 0 Window Manager\DWM-3 10 0 2 0 0 0 Window Manager\DWM-2 8 0 2 0 0 0 Window Manager\DWM-4 4 0 0 0 0 0 Window Manager\DWM-5 2 0 0 0 0 0
Remote Interactive Logon (Terminal Services, Remote Desktop, or Remote Assistance)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\pSIMPSON 36 0 12 0 4 0
Network Logon (logon for remote access to a system resource, such as a shared folder)
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 51 of 73
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\PSIMPSON-WIN764$ 614 0 166 0 38 0 PIT\mparish 184 0 109 0 0 0 PIT\JDAVIS 144 0 23 0 6 0 PIT\Administrator 89 0 39 0 31 0 PIT\gHAMMOND 47 0 47 0 0 0 PIT\wparson 31 0 15 0 15 0 PIT\pSIMPSON 17 0 7 0 0 0 PIT\mSUMMER 12 0 12 0 12 0 NT AUTHORITY\ANONYMOUS LOGON 7 0 3 0 1 0 PIT\kjacobs 6 0 0 0 0 0 PIT\DHAROLD-PC$ 1 0 0 0 0 0
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 52 of 73
1.31 - PSIMPSON-WIN7TEST
Windows 7 Professional DNS Names(s) psimpson-win7test.corp.myco.com IP Address(es) 10.0.7.82
Remote Interactive Logon (Terminal Services, Remote Desktop, or Remote Assistance)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\pSIMPSON 18 0 0 0 0 0 PIT\administrator 1 0 0 0 0 0
Network Logon (logon for remote access to a system resource, such as a shared folder)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\PSIMPSON-WIN7TEST$ 566 0 150 0 37 0 PIT\UTIL01$ 384 0 94 0 18 0 PIT\mparish 181 0 110 0 0 0 PIT\Administrator 89 0 38 0 31 0 PIT\pSIMPSON 57 0 34 0 3 0 PIT\gHAMMOND 37 0 37 0 0 0 PIT\wparson 24 0 9 0 9 0 PIT\JDAVIS 20 0 0 0 0 0 PIT\mSUMMER 7 0 7 0 7 0 PIT\sRammond 6 0 0 0 0 0 NT AUTHORITY\ANONYMOUS LOGON 1 0 0 0 0 0
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 53 of 73
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 54 of 73
1.32 - PSIMPSON1
Windows 7 Enterprise DNS Names(s) psimpson1.corp.myco.com IP Address(es) 10.0.7.32
Remote Interactive Logon (Terminal Services, Remote Desktop, or Remote Assistance)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\pSIMPSON 10 0 8 0 0 0
Network Logon (logon for remote access to a system resource, such as a shared folder)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\PSIMPSON1$ 554 0 154 0 37 0 PIT\Administrator 191 0 64 0 51 0 PIT\mparish 122 0 80 0 0 0 PIT\pSIMPSON 61 0 53 0 3 0 PIT\gHAMMOND 60 0 60 0 0 0 PIT\wparson 45 0 21 0 21 0 PIT\JDAVIS 28 0 0 0 0 0 PIT\mSUMMER 17 0 17 0 17 0 PIT\sRammond 9 0 0 0 0 0 NT AUTHORITY\ANONYMOUS LOGON 6 0 1 0 0 0 PIT\slowe 1 0 1 0 0 0 PIT\mELKINS 1 0 1 0 1 0
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 55 of 73
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 56 of 73
1.33 - RANCOR
Windows 8 Enterprise DNS Names(s) rancor.corp.myco.com IP Address(es) 10.0.7.57
Interactive Logon (logon at keyboard and screen of system)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\thughes 80 0 42 0 10 0 Window Manager\DWM-2 22 0 0 0 0 0 Window Manager\DWM-3 10 0 0 0 0 0 Window Manager\DWM-1 4 0 2 0 2 0
Remote Interactive Logon (Terminal Services, Remote Desktop, or Remote Assistance)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\thughes 22 0 0 0 0 0
Network Logon (logon for remote access to a system resource, such as a shared folder)
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 57 of 73
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\RANCOR$ 591 0 153 0 38 0 PIT\mparish 266 0 107 0 0 0 PIT\Administrator 182 0 47 0 36 0 PIT\gHAMMOND 55 0 55 0 0 0 PIT\wparson 50 0 23 0 23 0 PIT\thughes 38 0 14 0 0 0 PIT\pSIMPSON 30 0 25 0 6 0 PIT\JDAVIS 23 0 0 0 0 0 PIT\sRammond 7 0 0 0 0 0 PIT\mSUMMER 7 0 7 0 7 0 NT AUTHORITY\ANONYMOUS LOGON 2 0 1 0 1 0
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 58 of 73
1.34 - SE-DAVIS
Windows 7 Professional DNS Names(s) se-davis.corp.myco.com IP Address(es) 10.0.7.20
Interactive Logon (logon at keyboard and screen of system)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\tholmes 15 0 6 0 2 0 PIT\kjacobs 3 0 0 0 0 0
Remote Interactive Logon (Terminal Services, Remote Desktop, or Remote Assistance)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\tholmes 3 0 0 0 0 0
Network Logon (logon for remote access to a system resource, such as a shared folder)
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 59 of 73
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\JIM-WIN8$ 1287 0 1287 0 0 0 PIT\SE-DAVIS$ 420 0 141 0 34 0 PIT\rjohnson 355 0 82 0 27 0 PIT\DC02$ 191 0 65 0 14 0 PIT\mparish 181 0 109 0 0 0 PIT\MARKETING-1$ 160 0 43 0 15 0 PIT\DC01$ 138 0 48 0 12 0 PIT\UTIL01$ 136 0 46 0 10 0 PIT\Administrator 78 0 40 0 32 0 PIT\gHAMMOND 48 0 48 0 0 0 PIT\wparson 35 0 17 0 17 0 PIT\pSIMPSON 31 0 26 0 4 0 PIT\JDAVIS 18 0 1 0 0 0 PIT\mSUMMER 11 0 11 0 11 0 PIT\sRammond 8 0 0 0 0 0 PIT\kjacobs 7 0 0 0 0 0 NT AUTHORITY\ANONYMOUS LOGON 6 0 0 0 0 0 PIT\DHAROLD-PC$ 1 0 0 0 0 0
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 60 of 73
1.35 - SHAREPOINT-01
Windows Server 2012 Datacenter DNS Names(s) sharepoint-01.corp.myco.com IP Address(es) 10.0.1.71
Network Logon (logon for remote access to a system resource, such as a shared folder)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\SharePointSQL 20538 0 20538 0 20538 0 PIT\Administrator 86 0 86 0 86 0 PIT\SHAREPOINT-01$ 12 0 12 0 12 0 PIT\wparson 9 0 9 0 9 0 itc_domain\itc_test 0 3 0 3 0 3
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 61 of 73
1.36 - SLOWE-WIN8
Windows 8 Enterprise DNS Names(s) slowe-win8.corp.myco.com IP Address(es) 10.0.6.0
Interactive Logon (logon at keyboard and screen of system)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure Window Manager\DWM-4 76 0 0 0 0 0 Window Manager\DWM-3 64 0 6 0 0 0 Window Manager\DWM-5 52 0 0 0 0 0 PIT\slowe 47 0 10 0 0 0 Window Manager\DWM-2 46 0 20 0 8 0 Window Manager\DWM-1 30 0 16 0 0 0 Window Manager\DWM-7 8 0 0 0 0 0 PIT\pSIMPSON 6 0 0 0 0 0 Window Manager\DWM-6 6 0 0 0 0 0 Window Manager\DWM-8 6 0 0 0 0 0 PIT\eHAMMOND 2 0 0 0 0 0 PIT\pkrickey 2 0 0 0 0 0
Remote Interactive Logon (Terminal Services, Remote Desktop, or Remote Assistance)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\slowe 70 0 27 0 1 0
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 62 of 73
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\eHAMMOND 8 0 4 0 0 0 PIT\JDAVIS 6 0 6 0 0 0 PIT\Pkrickey 6 0 0 0 0 0
Network Logon (logon for remote access to a system resource, such as a shared folder)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure NT AUTHORITY\ANONYMOUS LOGON 660 0 7 0 0 0 PIT\SLOWE-WIN8$ 532 0 160 0 37 0 PIT\UTIL01$ 196 0 18 0 8 0 PIT\slowe 185 0 18 0 8 0 PIT\Administrator 88 0 51 0 41 0 PIT\gHAMMOND 28 0 28 0 0 0 PIT\pSIMPSON 18 0 13 0 0 0 PIT\wparson 14 0 6 0 6 0 PIT\JDAVIS 6 0 0 0 0 0 PIT\sRammond 3 0 0 0 0 0 PIT\mSUMMER 3 0 3 0 3 0 PIT\SARAH$ 2 0 0 0 0 0
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 63 of 73
1.37 - SQL2012-01
Windows Server 2012 R2 Datacenter DNS Names(s) sql2012-01.corp.myco.com IP Address(es) 10.0.1.61
Network Logon (logon for remote access to a system resource, such as a shared folder)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\SharePointSQL 19486 0 6192 0 1642 0 PIT\SQL2012-01$ 328 0 134 0 33 0 PIT\Administrator 185 0 152 0 123 0 PIT\mparish 155 0 103 0 0 0 PIT\gHAMMOND 114 0 114 0 0 0 PIT\wparson 42 0 9 0 9 0 PIT\pSIMPSON 21 0 21 0 0 0 PIT\mSUMMER 13 0 13 0 13 0 itc_domain\itc_test 0 86 0 37 0 9
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 64 of 73
1.38 - STORAGE01
Windows Server 2008 R2 Enterprise DNS Names(s) storage01.corp.myco.com IP Address(es) 10.0.1.69
Interactive Logon (logon at keyboard and screen of system)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\pkrickey 1 0 1 0 1 0
Remote Interactive Logon (Terminal Services, Remote Desktop, or Remote Assistance)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\pkrickey 2 0 0 0 0 0
Network Logon (logon for remote access to a system resource, such as a shared folder)
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 65 of 73
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\pSIMPSON 4100 0 366 0 79 0 PIT\Pkrickey 2377 0 697 0 148 0 PIT\STORAGE01$ 530 0 134 0 32 0 PIT\JDAVIS 460 0 193 0 43 0 PIT\mparish 360 0 250 0 38 0 PIT\Administrator 246 0 109 0 67 0 PIT\wparson 200 0 22 0 13 0 PIT\eHAMMOND 156 0 47 0 12 0 PIT\mmayhemON 123 0 77 0 51 0 PIT\gHAMMOND 116 6 62 1 0 0 PIT\tholmes 105 0 6 0 2 0 PIT\slowe 102 0 17 0 1 0 PIT\kmayhem 97 0 47 0 18 0 PIT\mELKINS 93 0 22 0 8 0 PIT\rphillis 86 0 23 0 5 0 PIT\sRammond 69 0 27 0 4 0 PIT\HV03$ 68 0 14 0 4 0 PIT\fthomas 63 0 38 0 9 0 PIT\thughes 56 0 22 0 10 0 PIT\mSUMMER 49 0 12 0 10 0 PIT\HV01$ 45 0 2 0 0 0 PIT\HV04$ 32 0 7 0 4 0 PIT\BKRICKEY 31 0 8 0 2 0 PIT\MELKINS-HP$ 26 0 8 0 2 0 PIT\kjacobs 18 0 2 0 0 0 PIT\MYCO30DEV$ 15 0 15 0 0 0 NT AUTHORITY\ANONYMOUS LOGON 14 0 14 0 0 0 PIT\rjohnson 8 0 2 0 1 0 PIT\SLOWE-WIN8$ 7 0 0 0 0 0 PIT\SLOWE-WIN7$ 5 0 0 0 0 0 PIT\MmayhemON-HP$ 4 0 4 0 0 0 PIT\PSIMPSON-WIN764$ 3 0 3 0 0 0 PIT\UTIL01$ 2 0 0 0 0 0 PIT\GHAMMOND-LT$ 2 0 0 0 0 0 PIT\mDAVIS 1 0 0 0 0 0 HV01-WIN7-1\dev 0 126 0 126 0 126 MicrosoftAccount\[email protected] 0 3 0 3 0 0 FTWork-PC\FTWork 0 38 0 16 0 0 itc_domain\itc_test 0 91 0 37 0 9
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 66 of 73
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure VistaUltimate\admin 0 7 0 1 0 0 WIN-2EV4C6RNULJ\Administrator 0 13 0 0 0 0 STORAGE01\Guest 0 11 0 0 0 0 PIT\echristy 0 5 0 0 0 0 WIN-F90C1OQ9S09\Administrator 0 18 0 0 0 0
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 67 of 73
1.39 - TANDEM
Windows 7 Enterprise DNS Names(s) tandem.corp.myco.com IP Address(es) fe80::242f:6b98:cbb:fb22%28,10.0.7.28
Interactive Logon (logon at keyboard and screen of system)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\wparson 174 0 22 0 8 0
Remote Interactive Logon (Terminal Services, Remote Desktop, or Remote Assistance)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\wparson 22 0 12 0 4 0
Network Logon (logon for remote access to a system resource, such as a shared folder)
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 68 of 73
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\TANDEM$ 545 0 135 0 32 0 PIT\mparish 183 0 106 0 0 0 PIT\Administrator 118 0 35 0 28 0 PIT\wparson 50 0 26 0 18 0 PIT\gHAMMOND 46 0 46 0 0 0 PIT\pSIMPSON 28 0 23 0 5 0 PIT\JDAVIS 14 0 0 0 0 0 PIT\UTIL01$ 13 0 11 0 4 0 PIT\mSUMMER 10 0 10 0 10 0 PIT\kjacobs 7 0 0 0 0 0 PIT\thughes 4 0 4 0 1 0 PIT\sRammond 2 0 0 0 0 0 PIT\DHAROLD-PC$ 1 0 0 0 0 0 PIT\DC01$ 1 0 0 0 0 0 PIT\RANCOR$ 1 0 1 0 0 0
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 69 of 73
1.40 - UTIL01
Windows Server 2008 R2 Datacenter DNS Names(s) util01.corp.myco.com, corp.myco.com IP Address(es) 172.20.0.5,10.0.1.5,10.0.7.89
Network Logon (logon for remote access to a system resource, such as a shared folder)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\DC01$ 7142 0 7142 0 7142 0 PIT\DC02$ 5299 0 5299 0 5299 0 PIT\UTIL01$ 3634 0 3634 0 3634 0 PIT\DC03$ 1550 0 1550 0 1550 0 PIT\STORAGE01$ 372 0 372 0 372 0 PIT\mparish 216 0 216 0 216 0 PIT\MYCO30DEV$ 213 0 213 0 213 0 PIT\Administrator 211 0 211 0 211 0 PIT\ISA1$ 190 0 190 0 190 0 PIT\pSIMPSON 168 0 168 0 168 0 PIT\DEVTFS$ 154 0 154 0 154 0 PIT\JDAVIS 144 0 144 0 144 0 PIT\HV05$ 135 0 135 0 135 0 PIT\PSIMPSON-WIN764$ 134 0 134 0 134 0 PIT\HV01$ 118 0 118 0 118 0 PIT\PSIMPSON-WIN7TEST$ 104 0 104 0 104 0 PIT\Pkrickey 102 0 102 0 102 0 PIT\thughes 87 0 87 0 87 0 PIT\mmayhemON 87 0 87 0 87 0 PIT\MmayhemON-HP$ 83 0 83 0 83 0 PIT\TANDEM$ 83 0 83 0 83 0 PIT\OPS001$ 83 0 83 0 83 0 PIT\rphillis 82 0 82 0 82 0 PIT\RANCOR$ 80 0 80 0 80 0 NT AUTHORITY\ANONYMOUS LOGON 79 0 79 0 79 0 PIT\JIM-WIN8$ 76 0 76 0 76 0 PIT\MYCOROOTAUTH$ 71 0 71 0 71 0 PIT\HV04$ 68 0 68 0 68 0 PIT\REX$ 65 0 65 0 65 0
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 70 of 73
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\HV02$ 63 0 63 0 63 0 PIT\MARKETING-1$ 63 0 63 0 63 0 PIT\wparson 61 0 61 0 61 0 PIT\BKRICKEY-WIN7$ 57 0 57 0 57 0 PIT\mELKINS 55 0 55 0 55 0 PIT\SLOWE-WIN8$ 49 0 49 0 49 0 PIT\eHAMMOND 48 0 48 0 48 0 PIT\SE-DAVIS$ 46 0 46 0 46 0 PIT\MYCO-ATL-CORE$ 31 0 31 0 31 0 PIT\UTIL12$ 29 0 29 0 29 0 PIT\BKRICKEY 29 0 29 0 29 0 PIT\MmayhemON1$ 29 0 29 0 29 0 PIT\slowe 28 0 28 0 28 0 PIT\FILE2012-1$ 28 0 28 0 28 0 PIT\REMOTE$ 27 0 27 0 27 0 PIT\sRammond 26 0 26 0 26 0 PIT\rjohnson 25 0 25 0 25 0 PIT\tholmes 20 0 20 0 20 0 DEV\DEV1DC1$ 15 0 15 0 15 0 PIT\MWEST-WIN864$ 15 0 15 0 15 0 PIT\FT-LENOVO$ 12 0 12 0 12 0 PIT\SQL2012-01$ 12 0 12 0 12 0 PIT\SLOWE-WIN7$ 11 0 11 0 11 0 PIT\JOES-PC$ 11 0 11 0 11 0 PIT\SharePointSQL 9 0 9 0 9 0 PIT\PSIMPSON1$ 9 0 9 0 9 0 PIT\MSUMMER-LT$ 9 0 9 0 9 0 PIT\JIM-WIN7$ 9 0 9 0 9 0 PIT\SHAREPOINT-01$ 7 0 7 0 7 0 PIT\USER-PC23$ 6 0 6 0 6 0 PIT\mSUMMER 6 0 6 0 6 0
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 71 of 73
1.41 - UTIL12
Windows Server 2012 R2 Standard DNS Names(s) util12.corp.myco.com IP Address(es) 10.0.1.15
Network Logon (logon for remote access to a system resource, such as a shared folder)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\Pkrickey 11597 0 11597 0 4126 0 PIT\Administrator 134 0 134 0 134 0 PIT\UTIL12$ 96 0 96 0 33 0 PIT\gHAMMOND 17 0 17 0 0 0 PIT\mSUMMER 11 0 11 0 11 0 PIT\wparson 9 0 9 0 9 0
2 - Domain: No Domain
2.1 - slowe-win7.corp.MyCo.com
Windows 7 Enterprise DNS Names(s) slowe-win7.corp.myco.com IP Address(es) 10.0.7.19
Interactive Logon (logon at keyboard and screen of system)
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 72 of 73
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\eHAMMOND 37 0 9 0 4 0 PIT\slowe 2 0 0 0 0 0 PIT\sRammond 2 0 0 0 0 0
Remote Interactive Logon (Terminal Services, Remote Desktop, or Remote Assistance)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\slowe 6 0 1 0 0 0 PIT\eHAMMOND 1 0 0 0 0 0
Network Logon (logon for remote access to a system resource, such as a shared folder)
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure NT AUTHORITY\ANONYMOUS LOGON 1309 0 1 0 1 0 PIT\SLOWE-WIN7$ 382 0 140 0 34 0 PIT\mparish 166 0 103 0 0 0 PIT\Administrator 93 0 39 0 32 0 PIT\gHAMMOND 45 0 45 0 0 0 PIT\wparson 31 0 15 0 15 0 PIT\pSIMPSON 28 0 23 0 4 0 PIT\JDAVIS 15 0 2 0 2 0 PIT\mSUMMER 12 0 12 0 12 0 PIT\slowe 11 0 3 0 0 0 PIT\UTIL01$ 10 0 2 0 0 0
Login History by Computer SECURITY ASSESSMENT
PROPRIETARY & CONFIDENTIAL PAGE 73 of 73
User Past 30 Days Past 7 Days Past 24 Hours Success Failure Success Failure Success Failure PIT\kjacobs 7 0 0 0 0 0 PIT\DHAROLD-PC$ 1 0 0 0 0 0