sorry for the late reply iv recently set up a new server and the same issue happened (well i neve managed access via network manager just ip) the new server is on truenass scale iv attached the log below.
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "MicrosoftAccount",
"clientAccount": "
anthony.parkinson.1983@gmail.com",
"workstation": "DESKTOP-CMRL7CM",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "
anthony.parkinson.1983@gmail.com",
"mappedDomain": "MicrosoftAccount",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv2",
"duration": 3530
}
},
{
"timestamp": "2022-01-16T08:57:44.110484-0800",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.1.249:445",
"remoteAddress": "ipv4:192.168.1.168:50363",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "MicrosoftAccount",
"clientAccount": "
anthony.parkinson.1983@gmail.com",
"workstation": "DESKTOP-CMRL7CM",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "
anthony.parkinson.1983@gmail.com",
"mappedDomain": "MicrosoftAccount",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv2",
"duration": 3617
}
},
{
"timestamp": "2022-01-16T08:57:44.123705-0800",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.1.249:445",
"remoteAddress": "ipv4:192.168.1.168:50364",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "MicrosoftAccount",
"clientAccount": "
anthony.parkinson.1983@gmail.com",
"workstation": "DESKTOP-CMRL7CM",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "
anthony.parkinson.1983@gmail.com",
"mappedDomain": "MicrosoftAccount",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv2",
"duration": 3283
}
},
{
"timestamp": "2022-01-16T08:57:44.137130-0800",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.1.249:445",
"remoteAddress": "ipv4:192.168.1.168:50365",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "MicrosoftAccount",
"clientAccount": "
anthony.parkinson.1983@gmail.com",
"workstation": "DESKTOP-CMRL7CM",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "
anthony.parkinson.1983@gmail.com",
"mappedDomain": "MicrosoftAccount",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv2",
"duration": 3310
}
},
{
"timestamp": "2022-01-16T08:57:44.157477-0800",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.1.249:445",
"remoteAddress": "ipv4:192.168.1.168:50366",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "MicrosoftAccount",
"clientAccount": "
anthony.parkinson.1983@gmail.com",
"workstation": "DESKTOP-CMRL7CM",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "
anthony.parkinson.1983@gmail.com",
"mappedDomain": "MicrosoftAccount",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv2",
"duration": 4469
}
},
{
"timestamp": "2022-01-16T08:57:44.179652-0800",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.1.249:445",
"remoteAddress": "ipv4:192.168.1.168:50367",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "MicrosoftAccount",
"clientAccount": "
anthony.parkinson.1983@gmail.com",
"workstation": "DESKTOP-CMRL7CM",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "
anthony.parkinson.1983@gmail.com",
"mappedDomain": "MicrosoftAccount",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv2",
"duration": 3311
}
},
{
"timestamp": "2022-01-16T08:57:44.196419-0800",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.1.249:445",
"remoteAddress": "ipv4:192.168.1.168:50368",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "MicrosoftAccount",
"clientAccount": "
anthony.parkinson.1983@gmail.com",
"workstation": "DESKTOP-CMRL7CM",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "
anthony.parkinson.1983@gmail.com",
"mappedDomain": "MicrosoftAccount",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv2",
"duration": 2935
}
},
{
"timestamp": "2022-01-16T08:57:44.212189-0800",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.1.249:445",
"remoteAddress": "ipv4:192.168.1.168:50369",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "MicrosoftAccount",
"clientAccount": "
anthony.parkinson.1983@gmail.com",
"workstation": "DESKTOP-CMRL7CM",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "
anthony.parkinson.1983@gmail.com",
"mappedDomain": "MicrosoftAccount",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv2",
"duration": 2989
}
},
{
"timestamp": "2022-01-16T08:57:44.230568-0800",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.1.249:445",
"remoteAddress": "ipv4:192.168.1.168:50370",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "MicrosoftAccount",
"clientAccount": "
anthony.parkinson.1983@gmail.com",
"workstation": "DESKTOP-CMRL7CM",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "
anthony.parkinson.1983@gmail.com",
"mappedDomain": "MicrosoftAccount",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv2",
"duration": 4208
}
},
{
"timestamp": "2022-01-16T08:57:44.278307-0800",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.1.249:445",
"remoteAddress": "ipv4:192.168.1.168:50372",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "MicrosoftAccount",
"clientAccount": "
anthony.parkinson.1983@gmail.com",
"workstation": "DESKTOP-CMRL7CM",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "
anthony.parkinson.1983@gmail.com",
"mappedDomain": "MicrosoftAccount",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv2",
"duration": 4650
}
},
{
"timestamp": "2022-01-16T08:57:44.296769-0800",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.1.249:445",
"remoteAddress": "ipv4:192.168.1.168:50373",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "MicrosoftAccount",
"clientAccount": "
anthony.parkinson.1983@gmail.com",
"workstation": "DESKTOP-CMRL7CM",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "
anthony.parkinson.1983@gmail.com",
"mappedDomain": "MicrosoftAccount",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv2",
"duration": 3473
}
},
{
"timestamp": "2022-01-16T08:57:44.317333-0800",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.1.249:445",
"remoteAddress": "ipv4:192.168.1.168:50374",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "MicrosoftAccount",
"clientAccount": "
anthony.parkinson.1983@gmail.com",
"workstation": "DESKTOP-CMRL7CM",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "
anthony.parkinson.1983@gmail.com",
"mappedDomain": "MicrosoftAccount",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv2",
"duration": 4079
}
},
{
"timestamp": "2022-01-16T08:57:44.332209-0800",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.1.249:445",
"remoteAddress": "ipv4:192.168.1.168:50375",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "MicrosoftAccount",
"clientAccount": "
anthony.parkinson.1983@gmail.com",
"workstation": "DESKTOP-CMRL7CM",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "
anthony.parkinson.1983@gmail.com",
"mappedDomain": "MicrosoftAccount",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv2",
"duration": 3148
}
},
{
"timestamp": "2022-01-16T08:57:44.350737-0800",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.1.249:445",
"remoteAddress": "ipv4:192.168.1.168:50376",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "MicrosoftAccount",
"clientAccount": "
anthony.parkinson.1983@gmail.com",
"workstation": "DESKTOP-CMRL7CM",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "
anthony.parkinson.1983@gmail.com",
"mappedDomain": "MicrosoftAccount",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv2",
"duration": 6180
}
},
{
"timestamp": "2022-01-16T08:57:44.371491-0800",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.1.249:445",
"remoteAddress": "ipv4:192.168.1.168:50377",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "MicrosoftAccount",
"clientAccount": "
anthony.parkinson.1983@gmail.com",
"workstation": "DESKTOP-CMRL7CM",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "
anthony.parkinson.1983@gmail.com",
"mappedDomain": "MicrosoftAccount",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv2",
"duration": 4259
}
},
{
"timestamp": "2022-01-16T08:57:44.388570-0800",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.1.249:445",
"remoteAddress": "ipv4:192.168.1.168:50378",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "MicrosoftAccount",
"clientAccount": "
anthony.parkinson.1983@gmail.com",
"workstation": "DESKTOP-CMRL7CM",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "
anthony.parkinson.1983@gmail.com",
"mappedDomain": "MicrosoftAccount",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv2",
"duration": 5251
}
},
{
"timestamp": "2022-01-16T08:57:44.401592-0800",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.1.249:445",
"remoteAddress": "ipv4:192.168.1.168:50379",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "MicrosoftAccount",
"clientAccount": "
anthony.parkinson.1983@gmail.com",
"workstation": "DESKTOP-CMRL7CM",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "
anthony.parkinson.1983@gmail.com",
"mappedDomain": "MicrosoftAccount",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv2",
"duration": 2792
}
},
{
"timestamp": "2022-01-16T08:57:44.419622-0800",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.1.249:445",
"remoteAddress": "ipv4:192.168.1.168:50380",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "MicrosoftAccount",
"clientAccount": "
anthony.parkinson.1983@gmail.com",
"workstation": "DESKTOP-CMRL7CM",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "
anthony.parkinson.1983@gmail.com",
"mappedDomain": "MicrosoftAccount",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv2",
"duration": 3830
}
},
{
"timestamp": "2022-01-16T08:57:44.433550-0800",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.1.249:445",
"remoteAddress": "ipv4:192.168.1.168:50381",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "MicrosoftAccount",
"clientAccount": "
anthony.parkinson.1983@gmail.com",
"workstation": "DESKTOP-CMRL7CM",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "
anthony.parkinson.1983@gmail.com",
"mappedDomain": "MicrosoftAccount",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv2",
"duration": 4167
}
},
{
"timestamp": "2022-01-16T08:57:44.453401-0800",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.1.249:445",
"remoteAddress": "ipv4:192.168.1.168:50382",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "MicrosoftAccount",
"clientAccount": "
anthony.parkinson.1983@gmail.com",
"workstation": "DESKTOP-CMRL7CM",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "
anthony.parkinson.1983@gmail.com",
"mappedDomain": "MicrosoftAccount",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv2",
"duration": 7876
}
},
{
"timestamp": "2022-01-16T08:57:44.476810-0800",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.1.249:445",
"remoteAddress": "ipv4:192.168.1.168:50383",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "MicrosoftAccount",
"clientAccount": "
anthony.parkinson.1983@gmail.com",
"workstation": "DESKTOP-CMRL7CM",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "
anthony.parkinson.1983@gmail.com",
"mappedDomain": "MicrosoftAccount",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv2",
"duration": 4557
}
},
{
"timestamp": "2022-01-16T08:57:44.493014-0800",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.1.249:445",
"remoteAddress": "ipv4:192.168.1.168:50384",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "MicrosoftAccount",
"clientAccount": "
anthony.parkinson.1983@gmail.com",
"workstation": "DESKTOP-CMRL7CM",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "
anthony.parkinson.1983@gmail.com",
"mappedDomain": "MicrosoftAccount",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv2",
"duration": 3608
}
},
{
"timestamp": "2022-01-16T08:57:44.515153-0800",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.1.249:445",
"remoteAddress": "ipv4:192.168.1.168:50385",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "MicrosoftAccount",
"clientAccount": "
anthony.parkinson.1983@gmail.com",
"workstation": "DESKTOP-CMRL7CM",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "
anthony.parkinson.1983@gmail.com",
"mappedDomain": "MicrosoftAccount",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv2",
"duration": 3799
}
},
{
"timestamp": "2022-01-16T08:57:44.532362-0800",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.1.249:445",
"remoteAddress": "ipv4:192.168.1.168:50386",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "MicrosoftAccount",
"clientAccount": "
anthony.parkinson.1983@gmail.com",
"workstation": "DESKTOP-CMRL7CM",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "
anthony.parkinson.1983@gmail.com",
"mappedDomain": "MicrosoftAccount",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv2",
"duration": 3341
}
},
{
"timestamp": "2022-01-16T08:57:44.549735-0800",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_NO_SUCH_USER",
"localAddress": "ipv4:192.168.1.249:445",
"remoteAddress": "ipv4:192.168.1.168:50387",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "MicrosoftAccount",
"clientAccount": "
anthony.parkinson.1983@gmail.com",
"workstation": "DESKTOP-CMRL7CM",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "
anthony.parkinson.1983@gmail.com",
"mappedDomain": "MicrosoftAccount",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv2",
"duration": 4441
}
},
{
"timestamp": "2022-01-16T08:57:50.829848-0800",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",
"logonType": 3,
"status": "NT_STATUS_WRONG_PASSWORD",
"localAddress": "ipv4:192.168.1.249:445",
"remoteAddress": "ipv4:192.168.1.168:50391",
"serviceDescription": "SMB2",
"authDescription": null,
"clientDomain": "MicrosoftAccount",
"clientAccount": "Ant",
"workstation": "DESKTOP-CMRL7CM",
"becameAccount": null,
"becameDomain": null,
"becameSid": null,
"mappedAccount": "Ant",
"mappedDomain": "MicrosoftAccount",
"netlogonComputer": null,
"netlogonTrustAccount": null,
"netlogonNegotiateFlags": "0x00000000",
"netlogonSecureChannelType": 0,
"netlogonTrustAccountSid": null,
"passwordType": "NTLMv2",
"duration": 11323
}
},
{
"timestamp": "2022-01-16T08:57:50.860500-0800",
"type": "Authentication",
"Authentication": {
"version": {
"major": 1,
"minor": 2
},
"eventId": 4625,
"logonId": "0",