none
Security issue -- Help RRS feed

  • Question

  • Hi,

    I would like to check on the below event entry and any hacking activity related ?? Thanks in advance ... 

    Event 4624

    An account was successfully logged on.

    Subject:

    Security ID : MyDomain\Srvadmin

    Account Name : Srvadmin

    Account Domain : MyDomain

    Login ID : 0x58885cd

    Login Type : 3

    New Logon:

    Security ID : MyDomain\UserA

    Account Name : UserA

    Account Domain : MyDomain

    Logon ID : 0x5cb671d

    Login GUID : {lsdflasdflasdfjalsdjfalsdfj;alsdkf23423423443}

    Process Informations:

    Process ID : 0x9ec

    Process Name : C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\OWSTIMER.EXE


    N
    etwork Information

    Workstations Name : MyServer

    Source Network Address : -

    Source Port : - 

    Detailed Authentication Information:

    Logon Process : Authz

    Authentication Package : Kerberos

    Transited Services : -

    Package Name (NTLM only) : -

    Key Length: 0

        

    Wednesday, June 6, 2012 6:22 AM