Anonymous Logons

We are seeing a plethora of Anonymous Logons in our event
logs at the rate of a couple a minute - Can anyone offer
suggestions on how to track down the why and what???

This will be an ugly cut and paste but ...

Thanks in advance,

Edward

433326 saturn notice 2005-05-02 07:44:59 MSWinEventLog 1
Security 67927 Mon May 02 07:43:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA521F49B) Logon
Type: 3 59422
433325 saturn notice 2005-05-02 07:44:59 MSWinEventLog 1
Security 67926 Mon May 02 07:43:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA521F49B) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59421
433324 saturn notice 2005-05-02 07:44:59 MSWinEventLog 1
Security 67925 Mon May 02 07:43:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA521F464) Logon
Type: 3 59420
433323 saturn notice 2005-05-02 07:43:44 MSWinEventLog 1
Security 67924 Mon May 02 07:43:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA521F464) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59419
433322 saturn notice 2005-05-02 07:41:13 MSWinEventLog 1
Security 67923 Mon May 02 07:39:51 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA520E5C9) Logon
Type: 3 59418
433321 saturn notice 2005-05-02 07:41:13 MSWinEventLog 1
Security 67922 Mon May 02 07:39:51 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA520E5C9) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59417
433320 saturn notice 2005-05-02 07:41:13 MSWinEventLog 1
Security 67921 Mon May 02 07:39:51 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA520E592) Logon
Type: 3 59416
433319 saturn notice 2005-05-02 07:39:58 MSWinEventLog 1
Application 67920 Mon May 02 07:39:57 2005 4 Symantec
AntiVirus Unknown User N/A Warning SATURN None Update to
computer IRAHMAN of virus definition file 70501c failed.
Status 20000032 5586
433318 saturn notice 2005-05-02 07:39:51 MSWinEventLog 1
Security 67919 Mon May 02 07:39:51 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA520E592) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59415
433315 saturn notice 2005-05-02 07:34:30 MSWinEventLog 1
Security 67918 Mon May 02 07:34:05 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA51F50F2) Logon
Type: 3 59414
433314 saturn notice 2005-05-02 07:34:30 MSWinEventLog 1
Security 67917 Mon May 02 07:34:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA51F50F2) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59413
433313 saturn notice 2005-05-02 07:34:30 MSWinEventLog 1
Security 67916 Mon May 02 07:34:05 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA51F50D8) Logon
Type: 3 59412
433218 saturn notice 2005-05-02 07:34:05 MSWinEventLog 1
Security 67915 Mon May 02 07:34:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA51F50D8) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59411
433217 saturn notice 2005-05-02 07:32:59 MSWinEventLog 1
Security 67914 Mon May 02 07:31:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA51EBC59) Logon
Type: 3 59410
433216 saturn notice 2005-05-02 07:32:59 MSWinEventLog 1
Security 67913 Mon May 02 07:31:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA51EBC59) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59409
433215 saturn notice 2005-05-02 07:32:59 MSWinEventLog 1
Security 67912 Mon May 02 07:31:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA51EBC22) Logon
Type: 3 59408
433211 saturn notice 2005-05-02 07:31:44 MSWinEventLog 1
Security 67911 Mon May 02 07:31:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA51EBC22) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59407
433210 saturn notice 2005-05-02 07:29:06 MSWinEventLog 1
Security 67910 Mon May 02 07:27:51 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA51D9B6C) Logon
Type: 3 59406
433209 saturn notice 2005-05-02 07:29:06 MSWinEventLog 1
Security 67909 Mon May 02 07:27:51 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA51D9B6C) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59405
433208 saturn notice 2005-05-02 07:29:06 MSWinEventLog 1
Security 67908 Mon May 02 07:27:51 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA51D9B2D) Logon
Type: 3 59404
433207 saturn notice 2005-05-02 07:27:51 MSWinEventLog 1
Security 67907 Mon May 02 07:27:51 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA51D9B2D) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59403
433206 saturn notice 2005-05-02 07:22:30 MSWinEventLog 1
Security 67906 Mon May 02 07:22:06 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA51C0778) Logon
Type: 3 59402
433205 saturn notice 2005-05-02 07:22:30 MSWinEventLog 1
Security 67905 Mon May 02 07:22:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA51C0778) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59401
433204 saturn notice 2005-05-02 07:22:30 MSWinEventLog 1
Security 67904 Mon May 02 07:22:05 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA51C075E) Logon
Type: 3 59400
433203 saturn notice 2005-05-02 07:22:05 MSWinEventLog 1
Security 67903 Mon May 02 07:22:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA51C075E) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59399
433202 saturn notice 2005-05-02 07:20:59 MSWinEventLog 1
Security 67902 Mon May 02 07:19:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA51B6FA7) Logon
Type: 3 59398
433201 saturn notice 2005-05-02 07:20:59 MSWinEventLog 1
Security 67901 Mon May 02 07:19:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA51B6FA7) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59397
433200 saturn notice 2005-05-02 07:20:59 MSWinEventLog 1
Security 67900 Mon May 02 07:19:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA51B6F70) Logon
Type: 3 59396
433199 saturn notice 2005-05-02 07:19:44 MSWinEventLog 1
Security 67899 Mon May 02 07:19:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA51B6F70) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59395
433196 saturn notice 2005-05-02 07:17:06 MSWinEventLog 1
Security 67898 Mon May 02 07:15:51 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA51A63A2) Logon
Type: 3 59394
433195 saturn notice 2005-05-02 07:17:06 MSWinEventLog 1
Security 67897 Mon May 02 07:15:51 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA51A63A2) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59393
433194 saturn notice 2005-05-02 07:17:06 MSWinEventLog 1
Security 67896 Mon May 02 07:15:51 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA51A636A) Logon
Type: 3 59392
433193 saturn notice 2005-05-02 07:15:51 MSWinEventLog 1
Security 67895 Mon May 02 07:15:51 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA51A636A) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59391
433192 saturn notice 2005-05-02 07:10:30 MSWinEventLog 1
Security 67894 Mon May 02 07:10:06 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA518C79F) Logon
Type: 3 59390
433191 saturn notice 2005-05-02 07:10:30 MSWinEventLog 1
Security 67893 Mon May 02 07:10:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA518C79F) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59389
433190 saturn notice 2005-05-02 07:10:30 MSWinEventLog 1
Security 67892 Mon May 02 07:10:05 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA518C781) Logon
Type: 3 59388
433189 saturn notice 2005-05-02 07:10:05 MSWinEventLog 1
Security 67891 Mon May 02 07:10:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA518C781) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59387
433188 saturn notice 2005-05-02 07:08:59 MSWinEventLog 1
Security 67890 Mon May 02 07:07:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA51830D3) Logon
Type: 3 59386
433187 saturn notice 2005-05-02 07:08:59 MSWinEventLog 1
Security 67889 Mon May 02 07:07:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA51830D3) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59385
433186 saturn notice 2005-05-02 07:08:59 MSWinEventLog 1
Security 67888 Mon May 02 07:07:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA5183099) Logon
Type: 3 59384
433185 saturn notice 2005-05-02 07:07:44 MSWinEventLog 1
Security 67887 Mon May 02 07:07:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA5183099) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59383
433184 saturn notice 2005-05-02 07:05:06 MSWinEventLog 1
Security 67886 Mon May 02 07:03:51 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA5171D6F) Logon
Type: 3 59382
433183 saturn notice 2005-05-02 07:05:06 MSWinEventLog 1
Security 67885 Mon May 02 07:03:51 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA5171D6F) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59381
433182 saturn notice 2005-05-02 07:05:06 MSWinEventLog 1
Security 67884 Mon May 02 07:03:51 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA5171D38) Logon
Type: 3 59380
433181 saturn notice 2005-05-02 07:02:01 MSWinEventLog 1
Security 67882 Mon May 02 07:02:01 2005 538 Security
administrator User Success Audit SATURN Logon/Logoff User
Logoff: User Name: Administrator Domain: CORP Logon ID:
(0x0,0xA51574F1) Logon Type: 3 59378
433180 saturn notice 2005-05-02 07:01:13 MSWinEventLog 1
System 67881 Mon May 02 07:00:23 2005 7036 Service
Control Manager Unknown User N/A Information SATURN None
The Symantec AntiVirus Definition Watcher service entered
the running state. 2916
433179 saturn notice 2005-05-02 07:01:13 MSWinEventLog 1
System 67880 Mon May 02 07:00:23 2005 7035 Service
Control Manager administrator User Information SATURN
None The Symantec AntiVirus Definition Watcher service
was successfully sent a start control. 2915
433178 saturn notice 2005-05-02 07:01:13 MSWinEventLog 1
System 67879 Mon May 02 07:00:01 2005 7035 Service
Control Manager administrator User Information SATURN
None The Symantec AntiVirus Definition Watcher service
was successfully sent a stop control. 2914
433177 saturn notice 2005-05-02 07:00:48 MSWinEventLog 1
Security 67878 Mon May 02 07:00:25 2005 538 Security
administrator User Success Audit SATURN Logon/Logoff User
Logoff: User Name: Administrator Domain: CORP Logon ID:
(0x0,0xA515FF6C) Logon Type: 4 59377
433176 saturn notice 2005-05-02 07:00:48 MSWinEventLog 1
Security 67877 Mon May 02 07:00:24 2005 562 Security
SYSTEM User Success Audit SATURN Object Access Handle
Closed: Object Server: Security Handle ID: 191496 Process
ID: 1080 Image File Name: C:\WINNT\system32\svchost.exe
59376
433175 saturn notice 2005-05-02 07:00:48 MSWinEventLog 1
Security 67876 Mon May 02 07:00:24 2005 567 Security
SYSTEM User Success Audit SATURN Object Access Object
Access Attempt: Object Server: Security Handle ID: 191496
Object Type: File Process ID: 1080 Image File Name:
C:\WINNT\system32\svchost.exe Accesses: WriteData (or
AddFile) AppendData (or AddSubdirectory or
CreatePipeInstance) Access Mask: 0x6 59375
433174 saturn notice 2005-05-02 07:00:48 MSWinEventLog 1
Security 67875 Mon May 02 07:00:24 2005 560 Security
SYSTEM User Success Audit SATURN Object Access Object
Open: Object Server: Security Object Type: File Object
Name: C:\WINNT\Tasks\cegetter.job Handle ID: 191496
Operation ID: {0,2769709746} Process ID: 1080 Image File
Name: C:\WINNT\system32\svchost.exe Primary User Name:
SATURN$ Primary Domain: CORP Primary Logon ID:
(0x0,0x3E7) Client User Name: - Client Domain: - Client
Logon ID: - Accesses: READ_CONTROL SYNCHRONIZE WriteData
(or AddFile) AppendData (or AddSubdirectory or
CreatePipeInstance) WriteEA ReadAttributes
WriteAttributes Privileges: - Restricted Sid Count: 0
Access Mask: 0x120196 59374
433173 saturn notice 2005-05-02 07:00:48 MSWinEventLog 1
Security 67874 Mon May 02 07:00:24 2005 593 Security
administrator User Success Audit SATURN Detailed Tracking
A process has exited: Process ID: 5908 Image File Name:
C:\WINNT\system32\cmd.exe User Name: Administrator
Domain: CORP Logon ID: (0x0,0xA515FF6C) 59373
433172 saturn notice 2005-05-02 07:00:48 MSWinEventLog 1
Security 67873 Mon May 02 07:00:24 2005 593 Security
administrator User Success Audit SATURN Detailed Tracking
A process has exited: Process ID: 324 Image File Name:
C:\WINNT\system32\net.exe User Name: Administrator
Domain: CORP Logon ID: (0x0,0xA515FF6C) 59372
433171 saturn notice 2005-05-02 07:00:48 MSWinEventLog 1
Security 67872 Mon May 02 07:00:24 2005 593 Security
administrator User Success Audit SATURN Detailed Tracking
A process has exited: Process ID: 2796 Image File Name:
C:\WINNT\system32\net1.exe User Name: Administrator
Domain: CORP Logon ID: (0x0,0xA515FF6C) 59371
433170 saturn notice 2005-05-02 07:00:48 MSWinEventLog 1
Security 67871 Mon May 02 07:00:22 2005 592 Security
SYSTEM User Success Audit SATURN Detailed Tracking A new
process has been created: New Process ID: 1836 Image File
Name: C:\Program Files\SAV\DefWatch.exe Creator Process
ID: 668 User Name: SATURN$ Domain: CORP Logon ID:
(0x0,0x3E7) 59370
433169 saturn notice 2005-05-02 07:00:48 MSWinEventLog 1
Security 67870 Mon May 02 07:00:22 2005 592 Security
administrator User Success Audit SATURN Detailed Tracking
A new process has been created: New Process ID: 2796
Image File Name: C:\WINNT\system32\net1.exe Creator
Process ID: 324 User Name: Administrator Domain: CORP
Logon ID: (0x0,0xA515FF6C) 59369
433168 saturn notice 2005-05-02 07:00:48 MSWinEventLog 1
Security 67869 Mon May 02 07:00:22 2005 592 Security
administrator User Success Audit SATURN Detailed Tracking
A new process has been created: New Process ID: 324 Image
File Name: C:\WINNT\system32\net.exe Creator Process ID:
5908 User Name: Administrator Domain: CORP Logon ID:
(0x0,0xA515FF6C) 59368
433167 saturn notice 2005-05-02 07:00:23 MSWinEventLog 0
Security 67868 Mon May 02 07:00:22 2005 593 Security
administrator User Success Audit SATURN Detailed Tracking
A process has exited: Process ID: 4460 Image File Name:
C:\WINNT\system32\ftp.exe User Name: Administrator
Domain: CORP Logon ID: (0x0,0xA515FF6C) 59367
433166 saturn notice 2005-05-02 07:00:23 MSWinEventLog 0
Security 67867 Mon May 02 07:00:01 2005 592 Security
administrator User Success Audit SATURN Detailed Tracking
A new process has been created: New Process ID: 4460
Image File Name: C:\WINNT\system32\ftp.exe Creator
Process ID: 5908 User Name: Administrator Domain: CORP
Logon ID: (0x0,0xA515FF6C) 59366
433165 saturn notice 2005-05-02 07:00:22 MSWinEventLog 0
Security 67866 Mon May 02 07:00:01 2005 593 Security
administrator User Success Audit SATURN Detailed Tracking
A process has exited: Process ID: 2920 Image File Name:
C:\WINNT\system32\net.exe User Name: Administrator
Domain: CORP Logon ID: (0x0,0xA515FF6C) 59365
433164 saturn notice 2005-05-02 07:00:22 MSWinEventLog 0
Security 67865 Mon May 02 07:00:01 2005 593 Security
administrator User Success Audit SATURN Detailed Tracking
A process has exited: Process ID: 4168 Image File Name:
C:\WINNT\system32\net1.exe User Name: Administrator
Domain: CORP Logon ID: (0x0,0xA515FF6C) 59364
433163 saturn notice 2005-05-02 07:00:22 MSWinEventLog 1
Security 67858 Mon May 02 07:00:00 2005 528 Security
administrator User Success Audit SATURN Logon/Logoff
Successful Logon: User Name: Administrator Domain: CORP
Logon ID: (0x0,0xA515FF6C) Logon Type: 4 Logon Process:
Advapi Authentication Package: Negotiate Workstation
Name: SATURN Logon GUID: {604736ff-c6e4-99b3-e666-
dd430198d0b0} Caller User Name: SATURN$ Caller Domain:
CORP Caller Logon ID: (0x0,0x3E7) Caller Process ID: 1080
Transited Services: - Source Network Address: - Source
Port: - 59357
433162 saturn notice 2005-05-02 07:00:01 MSWinEventLog 1
System 67857 Mon May 02 07:00:01 2005 7036 Service
Control Manager Unknown User N/A Information SATURN None
The Symantec AntiVirus Definition Watcher service entered
the stopped state. 2913
433161 saturn notice 2005-05-02 06:58:31 MSWinEventLog 1
Security 67856 Mon May 02 06:58:31 2005 538 Security
BATDAN$ User Success Audit SATURN Logon/Logoff User
Logoff: User Name: BATDAN$ Domain: CORP Logon ID:
(0x0,0xA515745B) Logon Type: 3 59356
433160 saturn notice 2005-05-02 06:58:31 MSWinEventLog 1
Security 67855 Mon May 02 06:58:20 2005 540 Security
administrator User Success Audit SATURN Logon/Logoff
Successful Network Logon: User Name: Administrator
Domain: CORP Logon ID: (0x0,0xA51574F1) Logon Type: 3
Logon Process: Kerberos Authentication Package: Kerberos
Workstation Name: Logon GUID: {0f2b4555-f3dc-b208-bab6-
19d985621b68} Caller User Name: - Caller Domain: - Caller
Logon ID: - Caller Process ID: - Transited Services: -
Source Network Address: 172.17.81.96 Source Port: 0
59355
433159 saturn notice 2005-05-02 06:58:20 MSWinEventLog 1
Security 67854 Mon May 02 06:58:20 2005 540 Security
BATDAN$ User Success Audit SATURN Logon/Logoff Successful
Network Logon: User Name: BATDAN$ Domain: CORP Logon ID:
(0x0,0xA515745B) Logon Type: 3 Logon Process: Kerberos
Authentication Package: Kerberos Workstation Name: Logon
GUID: {e9a01a5d-bf81-dc88-30be-0835fd890461} Caller User
Name: - Caller Domain: - Caller Logon ID: - Caller
Process ID: - Transited Services: - Source Network
Address: 172.17.81.96 Source Port: 0 59354
433158 saturn notice 2005-05-02 06:58:20 MSWinEventLog 1
Security 67853 Mon May 02 06:58:05 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA5156DB8) Logon
Type: 3 59353
433157 saturn notice 2005-05-02 06:58:20 MSWinEventLog 1
Security 67852 Mon May 02 06:58:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA5156DB8) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59352
433156 saturn notice 2005-05-02 06:58:20 MSWinEventLog 1
Security 67851 Mon May 02 06:58:05 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA5156D9A) Logon
Type: 3 59351
433155 saturn notice 2005-05-02 06:58:05 MSWinEventLog 1
Security 67850 Mon May 02 06:58:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA5156D9A) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59350
433154 saturn notice 2005-05-02 06:56:59 MSWinEventLog 1
Security 67849 Mon May 02 06:55:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA514DAE3) Logon
Type: 3 59349
433153 saturn notice 2005-05-02 06:56:59 MSWinEventLog 1
Security 67848 Mon May 02 06:55:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA514DAE3) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59348
433152 saturn notice 2005-05-02 06:56:59 MSWinEventLog 1
Security 67847 Mon May 02 06:55:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA514DAA8) Logon
Type: 3 59347
433151 saturn notice 2005-05-02 06:55:44 MSWinEventLog 1
Security 67846 Mon May 02 06:55:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA514DAA8) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59346
433150 saturn notice 2005-05-02 06:53:06 MSWinEventLog 1
Security 67845 Mon May 02 06:51:51 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA513C40C) Logon
Type: 3 59345
433149 saturn notice 2005-05-02 06:53:06 MSWinEventLog 1
Security 67844 Mon May 02 06:51:51 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA513C40C) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59344
433148 saturn notice 2005-05-02 06:53:06 MSWinEventLog 1
Security 67843 Mon May 02 06:51:51 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA513C3E6) Logon
Type: 3 59343
433147 saturn notice 2005-05-02 06:51:51 MSWinEventLog 1
Security 67842 Mon May 02 06:51:51 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA513C3E6) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59342
433146 saturn notice 2005-05-02 06:49:56 MSWinEventLog 1
Security 67841 Mon May 02 06:49:56 2005 538 Security
BATDAN$ User Success Audit SATURN Logon/Logoff User
Logoff: User Name: BATDAN$ Domain: CORP Logon ID:
(0x0,0xA50361E7) Logon Type: 3 59341
433145 saturn notice 2005-05-02 06:49:56 MSWinEventLog 1
Security 67840 Mon May 02 06:49:56 2005 538 Security
administrator User Success Audit SATURN Logon/Logoff User
Logoff: User Name: Administrator Domain: CORP Logon ID:
(0x0,0xA3CAFC19) Logon Type: 3 59340
433144 saturn notice 2005-05-02 06:46:30 MSWinEventLog 1
Security 67839 Mon May 02 06:46:05 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA5122A32) Logon
Type: 3 59339
433143 saturn notice 2005-05-02 06:46:30 MSWinEventLog 1
Security 67838 Mon May 02 06:46:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA5122A32) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59338
433142 saturn notice 2005-05-02 06:46:30 MSWinEventLog 1
Security 67837 Mon May 02 06:46:05 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA51229FD) Logon
Type: 3 59337
433141 saturn notice 2005-05-02 06:46:05 MSWinEventLog 1
Security 67836 Mon May 02 06:46:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA51229FD) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59336
433140 saturn notice 2005-05-02 06:44:59 MSWinEventLog 1
Security 67835 Mon May 02 06:43:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA511978E) Logon
Type: 3 59335
433139 saturn notice 2005-05-02 06:44:59 MSWinEventLog 1
Security 67834 Mon May 02 06:43:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA511978E) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59334
433138 saturn notice 2005-05-02 06:44:59 MSWinEventLog 1
Security 67833 Mon May 02 06:43:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA511974C) Logon
Type: 3 59333
433137 saturn notice 2005-05-02 06:43:44 MSWinEventLog 1
Security 67832 Mon May 02 06:43:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA511974C) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59332
433136 saturn notice 2005-05-02 06:43:36 MSWinEventLog 1
Security 67831 Mon May 02 06:42:46 2005 538 Security BB
User Success Audit SATURN Logon/Logoff User Logoff: User
Name: BB Domain: CORP Logon ID: (0x0,0xA46FB843) Logon
Type: 3 59331
433135 saturn notice 2005-05-02 06:42:46 MSWinEventLog 1
Security 67830 Mon May 02 06:42:46 2005 540 Security BB
User Success Audit SATURN Logon/Logoff Successful Network
Logon: User Name: BB Domain: CORP Logon ID:
(0x0,0xA5117D86) Logon Type: 3 Logon Process: Kerberos
Authentication Package: Kerberos Workstation Name: Logon
GUID: {917f9812-d3b7-aab9-5c26-1c2a2720ea5c} Caller User
Name: - Caller Domain: - Caller Logon ID: - Caller
Process ID: - Transited Services: - Source Network
Address: 192.168.144.209 Source Port: 0 59330
433134 saturn notice 2005-05-02 06:41:06 MSWinEventLog 1
Security 67829 Mon May 02 06:39:51 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA5108358) Logon
Type: 3 59329
433133 saturn notice 2005-05-02 06:41:06 MSWinEventLog 1
Security 67828 Mon May 02 06:39:51 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA5108358) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59328
433132 saturn notice 2005-05-02 06:41:06 MSWinEventLog 1
Security 67827 Mon May 02 06:39:51 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA5108331) Logon
Type: 3 59327
433131 saturn notice 2005-05-02 06:39:51 MSWinEventLog 1
Security 67826 Mon May 02 06:39:51 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA5108331) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59326
433130 saturn notice 2005-05-02 06:34:30 MSWinEventLog 1
Security 67825 Mon May 02 06:34:05 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA50F4158) Logon
Type: 3 59325
433129 saturn notice 2005-05-02 06:34:30 MSWinEventLog 1
Security 67824 Mon May 02 06:34:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA50F4158) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59324
433128 saturn notice 2005-05-02 06:34:30 MSWinEventLog 1
Security 67823 Mon May 02 06:34:05 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA50F4140) Logon
Type: 3 59323
433127 saturn notice 2005-05-02 06:34:05 MSWinEventLog 1
Security 67822 Mon May 02 06:34:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA50F4140) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59322
433126 saturn notice 2005-05-02 06:32:59 MSWinEventLog 1
Security 67821 Mon May 02 06:31:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA50E5CB4) Logon
Type: 3 59321
433125 saturn notice 2005-05-02 06:32:59 MSWinEventLog 1
Security 67820 Mon May 02 06:31:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA50E5CB4) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59320
433124 saturn notice 2005-05-02 06:32:59 MSWinEventLog 1
Security 67819 Mon May 02 06:31:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA50E5C63) Logon
Type: 3 59319
433123 saturn notice 2005-05-02 06:31:44 MSWinEventLog 1
Security 67818 Mon May 02 06:31:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA50E5C63) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59318
433122 saturn notice 2005-05-02 06:29:05 MSWinEventLog 1
Security 67817 Mon May 02 06:27:50 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA50D3E85) Logon
Type: 3 59317
433121 saturn notice 2005-05-02 06:29:05 MSWinEventLog 1
Security 67816 Mon May 02 06:27:50 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA50D3E85) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59316
433120 saturn notice 2005-05-02 06:29:05 MSWinEventLog 1
Security 67815 Mon May 02 06:27:50 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA50D3E4C) Logon
Type: 3 59315
433119 saturn notice 2005-05-02 06:27:50 MSWinEventLog 1
Security 67814 Mon May 02 06:27:50 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA50D3E4C) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59314
433118 saturn notice 2005-05-02 06:22:30 MSWinEventLog 1
Security 67813 Mon May 02 06:22:06 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA50BF354) Logon
Type: 3 59313
433117 saturn notice 2005-05-02 06:22:30 MSWinEventLog 1
Security 67812 Mon May 02 06:22:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA50BF354) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59312
433116 saturn notice 2005-05-02 06:22:30 MSWinEventLog 1
Security 67811 Mon May 02 06:22:05 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA50BF31F) Logon
Type: 3 59311
433115 saturn notice 2005-05-02 06:22:05 MSWinEventLog 1
Security 67810 Mon May 02 06:22:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA50BF31F) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59310
433114 saturn notice 2005-05-02 06:20:59 MSWinEventLog 1
Security 67809 Mon May 02 06:19:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA50B1079) Logon
Type: 3 59309
433113 saturn notice 2005-05-02 06:20:59 MSWinEventLog 1
Security 67808 Mon May 02 06:19:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA50B1079) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59308
433112 saturn notice 2005-05-02 06:20:59 MSWinEventLog 1
Security 67807 Mon May 02 06:19:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA50B1043) Logon
Type: 3 59307
433111 saturn notice 2005-05-02 06:19:44 MSWinEventLog 1
Security 67806 Mon May 02 06:19:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA50B1043) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59306
433110 saturn notice 2005-05-02 06:17:05 MSWinEventLog 1
Security 67805 Mon May 02 06:15:50 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA50A4AFF) Logon
Type: 3 59305
433109 saturn notice 2005-05-02 06:17:05 MSWinEventLog 1
Security 67804 Mon May 02 06:15:50 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA50A4AFF) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59304
433108 saturn notice 2005-05-02 06:17:05 MSWinEventLog 1
Security 67803 Mon May 02 06:15:50 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA50A4AC8) Logon
Type: 3 59303
433107 saturn notice 2005-05-02 06:15:50 MSWinEventLog 1
Security 67802 Mon May 02 06:15:50 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA50A4AC8) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59302
433106 saturn notice 2005-05-02 06:10:46 MSWinEventLog 1
Security 67801 Mon May 02 06:10:22 2005 538 Security
SYSTEM User Success Audit SATURN Logon/Logoff User
Logoff: User Name: SATURN$ Domain: CORP Logon ID:
(0x0,0xA508BF52) Logon Type: 3 59301
433105 saturn notice 2005-05-02 06:10:21 MSWinEventLog 1
Security 67800 Mon May 02 06:10:21 2005 540 Security
SYSTEM User Success Audit SATURN Logon/Logoff Successful
Network Logon: User Name: SATURN$ Domain: CORP Logon ID:
(0x0,0xA508BF52) Logon Type: 3 Logon Process: Kerberos
Authentication Package: Kerberos Workstation Name: Logon
GUID: {ddc90127-45d3-8bc6-731f-fd7fad529f17} Caller User
Name: - Caller Domain: - Caller Logon ID: - Caller
Process ID: - Transited Services: - Source Network
Address: - Source Port: - 59300
433104 saturn notice 2005-05-02 06:10:21 MSWinEventLog 1
Security 67799 Mon May 02 06:10:05 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA508B830) Logon
Type: 3 59299
433103 saturn notice 2005-05-02 06:10:21 MSWinEventLog 1
Security 67798 Mon May 02 06:10:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA508B830) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59298
433102 saturn notice 2005-05-02 06:10:21 MSWinEventLog 1
Security 67797 Mon May 02 06:10:05 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA508B816) Logon
Type: 3 59297
433101 saturn notice 2005-05-02 06:10:05 MSWinEventLog 1
Security 67796 Mon May 02 06:10:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA508B816) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59296
433100 saturn notice 2005-05-02 06:08:59 MSWinEventLog 1
Security 67795 Mon May 02 06:07:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA50822AF) Logon
Type: 3 59295
433099 saturn notice 2005-05-02 06:08:59 MSWinEventLog 1
Security 67794 Mon May 02 06:07:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA50822AF) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59294
433098 saturn notice 2005-05-02 06:08:59 MSWinEventLog 1
Security 67793 Mon May 02 06:07:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA5082277) Logon
Type: 3 59293
433097 saturn notice 2005-05-02 06:07:44 MSWinEventLog 1
Security 67792 Mon May 02 06:07:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA5082277) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59292
433096 saturn notice 2005-05-02 06:05:05 MSWinEventLog 1
Security 67791 Mon May 02 06:03:50 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA5070E18) Logon
Type: 3 59291
433095 saturn notice 2005-05-02 06:05:05 MSWinEventLog 1
Security 67790 Mon May 02 06:03:50 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA5070E18) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59290
433094 saturn notice 2005-05-02 06:05:05 MSWinEventLog 1
Security 67789 Mon May 02 06:03:50 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA5070DE2) Logon
Type: 3 59289
433093 saturn notice 2005-05-02 06:03:50 MSWinEventLog 1
Security 67788 Mon May 02 06:03:50 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA5070DE2) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59288
433092 saturn notice 2005-05-02 05:58:30 MSWinEventLog 1
Security 67787 Mon May 02 05:58:05 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA5056470) Logon
Type: 3 59287
433091 saturn notice 2005-05-02 05:58:30 MSWinEventLog 1
Security 67786 Mon May 02 05:58:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA5056470) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59286
433090 saturn notice 2005-05-02 05:58:30 MSWinEventLog 1
Security 67785 Mon May 02 05:58:05 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA5056456) Logon
Type: 3 59285
433089 saturn notice 2005-05-02 05:58:05 MSWinEventLog 1
Security 67784 Mon May 02 05:58:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA5056456) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59284
433088 saturn notice 2005-05-02 05:56:59 MSWinEventLog 1
Security 67783 Mon May 02 05:55:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA504D298) Logon
Type: 3 59283
433087 saturn notice 2005-05-02 05:56:59 MSWinEventLog 1
Security 67782 Mon May 02 05:55:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA504D298) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59282
433086 saturn notice 2005-05-02 05:56:59 MSWinEventLog 1
Security 67781 Mon May 02 05:55:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA504D262) Logon
Type: 3 59281
433085 saturn notice 2005-05-02 05:55:44 MSWinEventLog 1
Security 67780 Mon May 02 05:55:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA504D262) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59280
433084 saturn notice 2005-05-02 05:53:05 MSWinEventLog 1
Security 67779 Mon May 02 05:51:50 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA503BF5C) Logon
Type: 3 59279
433083 saturn notice 2005-05-02 05:53:05 MSWinEventLog 1
Security 67778 Mon May 02 05:51:50 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA503BF5C) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59278
433082 saturn notice 2005-05-02 05:53:05 MSWinEventLog 1
Security 67777 Mon May 02 05:51:50 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA503BF27) Logon
Type: 3 59277
433081 saturn notice 2005-05-02 05:51:50 MSWinEventLog 1
Security 67776 Mon May 02 05:51:50 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA503BF27) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59276
433080 saturn notice 2005-05-02 05:51:15 MSWinEventLog 1
Security 67775 Mon May 02 05:51:15 2005 538 Security
BATDAN$ User Success Audit SATURN Logon/Logoff User
Logoff: User Name: BATDAN$ Domain: CORP Logon ID:
(0x0,0xA3CAFB55) Logon Type: 3 59275
433079 saturn notice 2005-05-02 05:51:15 MSWinEventLog 1
Security 67774 Mon May 02 05:51:15 2005 540 Security
BATDAN$ User Success Audit SATURN Logon/Logoff Successful
Network Logon: User Name: BATDAN$ Domain: CORP Logon ID:
(0x0,0xA50361E7) Logon Type: 3 Logon Process: Kerberos
Authentication Package: Kerberos Workstation Name: Logon
GUID: {3a0ce932-1597-8ea3-0555-c6a3e363db8f} Caller User
Name: - Caller Domain: - Caller Logon ID: - Caller
Process ID: - Transited Services: - Source Network
Address: 172.17.81.96 Source Port: 0 59274
433078 saturn notice 2005-05-02 05:46:30 MSWinEventLog 1
Security 67773 Mon May 02 05:46:05 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA5022F6D) Logon
Type: 3 59273
433077 saturn notice 2005-05-02 05:46:30 MSWinEventLog 1
Security 67772 Mon May 02 05:46:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA5022F6D) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59272
433076 saturn notice 2005-05-02 05:46:30 MSWinEventLog 1
Security 67771 Mon May 02 05:46:05 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA5022F55) Logon
Type: 3 59271
433075 saturn notice 2005-05-02 05:46:05 MSWinEventLog 1
Security 67770 Mon May 02 05:46:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA5022F55) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59270
433074 saturn notice 2005-05-02 05:44:59 MSWinEventLog 1
Security 67769 Mon May 02 05:43:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA5019BC0) Logon
Type: 3 59269
433073 saturn notice 2005-05-02 05:44:59 MSWinEventLog 1
Security 67768 Mon May 02 05:43:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA5019BC0) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59268
433072 saturn notice 2005-05-02 05:44:59 MSWinEventLog 1
Security 67767 Mon May 02 05:43:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA5019B98) Logon
Type: 3 59267
433071 saturn notice 2005-05-02 05:43:44 MSWinEventLog 1
Security 67766 Mon May 02 05:43:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA5019B98) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59266
433070 saturn notice 2005-05-02 05:41:05 MSWinEventLog 1
Security 67765 Mon May 02 05:39:50 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA5008740) Logon
Type: 3 59265
433069 saturn notice 2005-05-02 05:41:05 MSWinEventLog 1
Security 67764 Mon May 02 05:39:50 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA5008740) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59264
433068 saturn notice 2005-05-02 05:41:05 MSWinEventLog 1
Security 67763 Mon May 02 05:39:50 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA5008709) Logon
Type: 3 59263
433067 saturn notice 2005-05-02 05:39:50 MSWinEventLog 1
Security 67762 Mon May 02 05:39:50 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA5008709) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59262
433066 saturn notice 2005-05-02 05:34:30 MSWinEventLog 1
Security 67761 Mon May 02 05:34:05 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4FEF2AD) Logon
Type: 3 59261
433065 saturn notice 2005-05-02 05:34:30 MSWinEventLog 1
Security 67760 Mon May 02 05:34:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4FEF2AD) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59260
433064 saturn notice 2005-05-02 05:34:30 MSWinEventLog 1
Security 67759 Mon May 02 05:34:05 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4FEF291) Logon
Type: 3 59259
433063 saturn notice 2005-05-02 05:34:05 MSWinEventLog 1
Security 67758 Mon May 02 05:34:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4FEF291) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59258
433062 saturn notice 2005-05-02 05:32:59 MSWinEventLog 1
Security 67757 Mon May 02 05:31:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4FE5D7C) Logon
Type: 3 59257
433061 saturn notice 2005-05-02 05:32:59 MSWinEventLog 1
Security 67756 Mon May 02 05:31:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4FE5D7C) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59256
433060 saturn notice 2005-05-02 05:32:59 MSWinEventLog 1
Security 67755 Mon May 02 05:31:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4FE5D3B) Logon
Type: 3 59255
433059 saturn notice 2005-05-02 05:31:44 MSWinEventLog 1
Security 67754 Mon May 02 05:31:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4FE5D3B) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59254
433058 saturn notice 2005-05-02 05:29:05 MSWinEventLog 1
Security 67753 Mon May 02 05:27:50 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4FD3BF4) Logon
Type: 3 59253
433057 saturn notice 2005-05-02 05:29:05 MSWinEventLog 1
Security 67752 Mon May 02 05:27:50 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4FD3BF4) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59252
433056 saturn notice 2005-05-02 05:29:05 MSWinEventLog 1
Security 67751 Mon May 02 05:27:50 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4FD3BBD) Logon
Type: 3 59251
433055 saturn notice 2005-05-02 05:27:50 MSWinEventLog 1
Security 67750 Mon May 02 05:27:50 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4FD3BBD) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59250
433054 saturn notice 2005-05-02 05:22:30 MSWinEventLog 1
Security 67749 Mon May 02 05:22:05 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4FBA943) Logon
Type: 3 59249
433053 saturn notice 2005-05-02 05:22:30 MSWinEventLog 1
Security 67748 Mon May 02 05:22:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4FBA943) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59248
433052 saturn notice 2005-05-02 05:22:30 MSWinEventLog 1
Security 67747 Mon May 02 05:22:05 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4FBA928) Logon
Type: 3 59247
433051 saturn notice 2005-05-02 05:22:05 MSWinEventLog 1
Security 67746 Mon May 02 05:22:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4FBA928) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59246
433050 saturn notice 2005-05-02 05:20:59 MSWinEventLog 1
Security 67745 Mon May 02 05:19:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4FB1787) Logon
Type: 3 59245
433049 saturn notice 2005-05-02 05:20:59 MSWinEventLog 1
Security 67744 Mon May 02 05:19:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4FB1787) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59244
433048 saturn notice 2005-05-02 05:20:59 MSWinEventLog 1
Security 67743 Mon May 02 05:19:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4FB1750) Logon
Type: 3 59243
433047 saturn notice 2005-05-02 05:19:44 MSWinEventLog 1
Security 67742 Mon May 02 05:19:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4FB1750) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59242
433046 saturn notice 2005-05-02 05:17:05 MSWinEventLog 1
Security 67741 Mon May 02 05:15:50 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4FA046D) Logon
Type: 3 59241
433045 saturn notice 2005-05-02 05:17:05 MSWinEventLog 1
Security 67740 Mon May 02 05:15:50 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4FA046D) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59240
433044 saturn notice 2005-05-02 05:17:05 MSWinEventLog 1
Security 67739 Mon May 02 05:15:50 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4FA0437) Logon
Type: 3 59239
433043 saturn notice 2005-05-02 05:15:50 MSWinEventLog 1
Security 67738 Mon May 02 05:15:50 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4FA0437) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59238
433042 saturn notice 2005-05-02 05:10:30 MSWinEventLog 1
Security 67737 Mon May 02 05:10:05 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4F86704) Logon
Type: 3 59237
433041 saturn notice 2005-05-02 05:10:30 MSWinEventLog 1
Security 67736 Mon May 02 05:10:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4F86704) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59236
433040 saturn notice 2005-05-02 05:10:30 MSWinEventLog 1
Security 67735 Mon May 02 05:10:05 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4F866EA) Logon
Type: 3 59235
433039 saturn notice 2005-05-02 05:10:05 MSWinEventLog 1
Security 67734 Mon May 02 05:10:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4F866EA) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59234
433038 saturn notice 2005-05-02 05:08:59 MSWinEventLog 1
Security 67733 Mon May 02 05:07:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4F7D051) Logon
Type: 3 59233
433037 saturn notice 2005-05-02 05:08:59 MSWinEventLog 1
Security 67732 Mon May 02 05:07:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4F7D051) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59232
433036 saturn notice 2005-05-02 05:08:59 MSWinEventLog 1
Security 67731 Mon May 02 05:07:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4F7D019) Logon
Type: 3 59231
433035 saturn notice 2005-05-02 05:07:44 MSWinEventLog 1
Security 67730 Mon May 02 05:07:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4F7D019) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59230
433034 saturn notice 2005-05-02 05:05:05 MSWinEventLog 1
Security 67729 Mon May 02 05:03:50 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4F6BEB2) Logon
Type: 3 59229
433033 saturn notice 2005-05-02 05:05:05 MSWinEventLog 1
Security 67728 Mon May 02 05:03:50 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4F6BEB2) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59228
433032 saturn notice 2005-05-02 05:05:05 MSWinEventLog 1
Security 67727 Mon May 02 05:03:50 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4F6BE7B) Logon
Type: 3 59227
433031 saturn notice 2005-05-02 05:03:50 MSWinEventLog 1
Security 67726 Mon May 02 05:03:50 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4F6BE7B) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59226
433030 saturn notice 2005-05-02 04:58:30 MSWinEventLog 1
Security 67725 Mon May 02 04:58:05 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4F51F6A) Logon
Type: 3 59225
433029 saturn notice 2005-05-02 04:58:30 MSWinEventLog 1
Security 67724 Mon May 02 04:58:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4F51F6A) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59224
433028 saturn notice 2005-05-02 04:58:30 MSWinEventLog 1
Security 67723 Mon May 02 04:58:05 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4F51F50) Logon
Type: 3 59223
433027 saturn notice 2005-05-02 04:58:05 MSWinEventLog 1
Security 67722 Mon May 02 04:58:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4F51F50) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59222
433026 saturn notice 2005-05-02 04:56:59 MSWinEventLog 1
Security 67721 Mon May 02 04:55:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4F48B7C) Logon
Type: 3 59221
433025 saturn notice 2005-05-02 04:56:59 MSWinEventLog 1
Security 67720 Mon May 02 04:55:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4F48B7C) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59220
433024 saturn notice 2005-05-02 04:56:59 MSWinEventLog 1
Security 67719 Mon May 02 04:55:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4F48B43) Logon
Type: 3 59219
433023 saturn notice 2005-05-02 04:55:44 MSWinEventLog 1
Security 67718 Mon May 02 04:55:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4F48B43) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59218
433022 saturn notice 2005-05-02 04:53:05 MSWinEventLog 1
Security 67717 Mon May 02 04:51:50 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4F37608) Logon
Type: 3 59217
433021 saturn notice 2005-05-02 04:53:05 MSWinEventLog 1
Security 67716 Mon May 02 04:51:50 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4F37608) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59216
433020 saturn notice 2005-05-02 04:53:05 MSWinEventLog 1
Security 67715 Mon May 02 04:51:50 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4F375D1) Logon
Type: 3 59215
433019 saturn notice 2005-05-02 04:51:50 MSWinEventLog 1
Security 67714 Mon May 02 04:51:50 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4F375D1) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59214
433018 saturn notice 2005-05-02 04:51:31 MSWinEventLog 1
Security 67713 Mon May 02 04:50:16 2005 593 Security
SYSTEM User Success Audit SATURN Detailed Tracking A
process has exited: Process ID: 4968 Image File Name:
C:\WINNT\system32\userinit.exe User Name: SATURN$ Domain:
CORP Logon ID: (0x0,0x3E7) 59213
433017 saturn notice 2005-05-02 04:50:16 MSWinEventLog 0
Security 67712 Mon May 02 04:50:16 2005 592 Security
SYSTEM User Success Audit SATURN Detailed Tracking A new
process has been created: New Process ID: 4968 Image File
Name: C:\WINNT\system32\userinit.exe Creator Process ID:
624 User Name: SATURN$ Domain: CORP Logon ID: (0x0,0x3E7)
59212
433016 saturn notice 2005-05-02 04:46:30 MSWinEventLog 1
Security 67711 Mon May 02 04:46:05 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4F1DD31) Logon
Type: 3 59211
433015 saturn notice 2005-05-02 04:46:30 MSWinEventLog 1
Security 67710 Mon May 02 04:46:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4F1DD31) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59210
433014 saturn notice 2005-05-02 04:46:30 MSWinEventLog 1
Security 67709 Mon May 02 04:46:05 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4F1DD17) Logon
Type: 3 59209
433013 saturn notice 2005-05-02 04:46:05 MSWinEventLog 1
Security 67708 Mon May 02 04:46:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4F1DD17) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59208
433012 saturn notice 2005-05-02 04:44:59 MSWinEventLog 1
Security 67707 Mon May 02 04:43:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4F14B8F) Logon
Type: 3 59207
433011 saturn notice 2005-05-02 04:44:59 MSWinEventLog 1
Security 67706 Mon May 02 04:43:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4F14B8F) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59206
433010 saturn notice 2005-05-02 04:44:59 MSWinEventLog 1
Security 67705 Mon May 02 04:43:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4F14B3D) Logon
Type: 3 59205
433009 saturn notice 2005-05-02 04:43:44 MSWinEventLog 1
Security 67704 Mon May 02 04:43:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4F14B3D) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59204
433008 saturn notice 2005-05-02 04:41:05 MSWinEventLog 1
Security 67703 Mon May 02 04:39:50 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4F03BE3) Logon
Type: 3 59203
433007 saturn notice 2005-05-02 04:41:05 MSWinEventLog 1
Security 67702 Mon May 02 04:39:50 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4F03BE3) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59202
433006 saturn notice 2005-05-02 04:41:05 MSWinEventLog 1
Security 67701 Mon May 02 04:39:50 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4F03BAC) Logon
Type: 3 59201
433005 saturn notice 2005-05-02 04:39:50 MSWinEventLog 1
Security 67700 Mon May 02 04:39:50 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4F03BAC) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59200
433004 saturn notice 2005-05-02 04:34:30 MSWinEventLog 1
Security 67699 Mon May 02 04:34:05 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4EEA658) Logon
Type: 3 59199
433003 saturn notice 2005-05-02 04:34:30 MSWinEventLog 1
Security 67698 Mon May 02 04:34:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4EEA658) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59198
433002 saturn notice 2005-05-02 04:34:30 MSWinEventLog 1
Security 67697 Mon May 02 04:34:05 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4EEA63D) Logon
Type: 3 59197
433001 saturn notice 2005-05-02 04:34:05 MSWinEventLog 1
Security 67696 Mon May 02 04:34:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4EEA63D) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59196
433000 saturn notice 2005-05-02 04:32:59 MSWinEventLog 1
Security 67695 Mon May 02 04:31:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4EE113E) Logon
Type: 3 59195
432999 saturn notice 2005-05-02 04:32:59 MSWinEventLog 1
Security 67694 Mon May 02 04:31:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4EE113E) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59194
432998 saturn notice 2005-05-02 04:32:59 MSWinEventLog 1
Security 67693 Mon May 02 04:31:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4EE1108) Logon
Type: 3 59193
432997 saturn notice 2005-05-02 04:31:44 MSWinEventLog 1
Security 67692 Mon May 02 04:31:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4EE1108) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59192
432996 saturn notice 2005-05-02 04:29:05 MSWinEventLog 1
Security 67691 Mon May 02 04:27:50 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4ECF272) Logon
Type: 3 59191
432995 saturn notice 2005-05-02 04:29:05 MSWinEventLog 1
Security 67690 Mon May 02 04:27:50 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4ECF272) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59190
432994 saturn notice 2005-05-02 04:29:05 MSWinEventLog 1
Security 67689 Mon May 02 04:27:50 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4ECF21A) Logon
Type: 3 59189
432993 saturn notice 2005-05-02 04:27:50 MSWinEventLog 1
Security 67688 Mon May 02 04:27:50 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4ECF21A) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59188
432992 saturn notice 2005-05-02 04:25:11 MSWinEventLog 1
Security 67687 Mon May 02 04:24:21 2005 538 Security
SYSTEM User Success Audit SATURN Logon/Logoff User
Logoff: User Name: SATURN$ Domain: CORP Logon ID:
(0x0,0xA4EC3DF5) Logon Type: 3 59187
432991 saturn notice 2005-05-02 04:24:21 MSWinEventLog 1
Security 67686 Mon May 02 04:24:21 2005 540 Security
SYSTEM User Success Audit SATURN Logon/Logoff Successful
Network Logon: User Name: SATURN$ Domain: CORP Logon ID:
(0x0,0xA4EC3DF5) Logon Type: 3 Logon Process: Kerberos
Authentication Package: Kerberos Workstation Name: Logon
GUID: {7b8a0ce7-bd17-e595-69b2-b7053256a5d3} Caller User
Name: - Caller Domain: - Caller Logon ID: - Caller
Process ID: - Transited Services: - Source Network
Address: - Source Port: - 59186
432990 saturn notice 2005-05-02 04:22:30 MSWinEventLog 1
Security 67685 Mon May 02 04:22:05 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4EBA4B6) Logon
Type: 3 59185
432989 saturn notice 2005-05-02 04:22:30 MSWinEventLog 1
Security 67684 Mon May 02 04:22:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4EBA4B6) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59184
432988 saturn notice 2005-05-02 04:22:30 MSWinEventLog 1
Security 67683 Mon May 02 04:22:05 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4EBA49A) Logon
Type: 3 59183
432987 saturn notice 2005-05-02 04:22:05 MSWinEventLog 1
Security 67682 Mon May 02 04:22:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4EBA49A) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59182
432986 saturn notice 2005-05-02 04:20:59 MSWinEventLog 1
Security 67681 Mon May 02 04:19:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4EAC2CA) Logon
Type: 3 59181
432985 saturn notice 2005-05-02 04:20:59 MSWinEventLog 1
Security 67680 Mon May 02 04:19:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4EAC2CA) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59180
432984 saturn notice 2005-05-02 04:20:59 MSWinEventLog 1
Security 67679 Mon May 02 04:19:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4EAC292) Logon
Type: 3 59179
432983 saturn notice 2005-05-02 04:19:44 MSWinEventLog 1
Security 67678 Mon May 02 04:19:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4EAC292) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59178
432982 saturn notice 2005-05-02 04:17:05 MSWinEventLog 1
Security 67677 Mon May 02 04:15:50 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4E9B631) Logon
Type: 3 59177
432981 saturn notice 2005-05-02 04:17:05 MSWinEventLog 1
Security 67676 Mon May 02 04:15:50 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4E9B631) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59176
432980 saturn notice 2005-05-02 04:17:05 MSWinEventLog 1
Security 67675 Mon May 02 04:15:50 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4E9B5FA) Logon
Type: 3 59175
432979 saturn notice 2005-05-02 04:15:50 MSWinEventLog 1
Security 67674 Mon May 02 04:15:50 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4E9B5FA) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59174
432978 saturn notice 2005-05-02 04:10:30 MSWinEventLog 1
Security 67673 Mon May 02 04:10:05 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4E86D8D) Logon
Type: 3 59173
432977 saturn notice 2005-05-02 04:10:30 MSWinEventLog 1
Security 67672 Mon May 02 04:10:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4E86D8D) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59172
432976 saturn notice 2005-05-02 04:10:30 MSWinEventLog 1
Security 67671 Mon May 02 04:10:05 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4E86D71) Logon
Type: 3 59171
432975 saturn notice 2005-05-02 04:10:05 MSWinEventLog 1
Security 67670 Mon May 02 04:10:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4E86D71) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59170
432974 saturn notice 2005-05-02 04:08:59 MSWinEventLog 1
Security 67669 Mon May 02 04:07:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4E789CE) Logon
Type: 3 59169
432973 saturn notice 2005-05-02 04:08:59 MSWinEventLog 1
Security 67668 Mon May 02 04:07:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4E789CE) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59168
432972 saturn notice 2005-05-02 04:08:59 MSWinEventLog 1
Security 67667 Mon May 02 04:07:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4E789A6) Logon
Type: 3 59167
432971 saturn notice 2005-05-02 04:07:44 MSWinEventLog 1
Security 67666 Mon May 02 04:07:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4E789A6) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59166
432970 saturn notice 2005-05-02 04:05:05 MSWinEventLog 1
Security 67665 Mon May 02 04:03:50 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4E6C328) Logon
Type: 3 59165
432969 saturn notice 2005-05-02 04:05:05 MSWinEventLog 1
Security 67664 Mon May 02 04:03:50 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4E6C328) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59164
432968 saturn notice 2005-05-02 04:05:05 MSWinEventLog 1
Security 67663 Mon May 02 04:03:50 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4E6C2B7) Logon
Type: 3 59163
432967 saturn notice 2005-05-02 04:03:50 MSWinEventLog 1
Security 67662 Mon May 02 04:03:50 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4E6C2B7) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59162
432966 saturn notice 2005-05-02 03:58:30 MSWinEventLog 1
Security 67661 Mon May 02 03:58:05 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4E51E1A) Logon
Type: 3 59161
432965 saturn notice 2005-05-02 03:58:30 MSWinEventLog 1
Security 67660 Mon May 02 03:58:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4E51E1A) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59160
432964 saturn notice 2005-05-02 03:58:30 MSWinEventLog 1
Security 67659 Mon May 02 03:58:05 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4E51DFC) Logon
Type: 3 59159
432963 saturn notice 2005-05-02 03:58:05 MSWinEventLog 1
Security 67658 Mon May 02 03:58:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4E51DFC) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59158
432962 saturn notice 2005-05-02 03:56:59 MSWinEventLog 1
Security 67657 Mon May 02 03:55:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4E488C1) Logon
Type: 3 59157
432961 saturn notice 2005-05-02 03:56:59 MSWinEventLog 1
Security 67656 Mon May 02 03:55:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4E488C1) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59156
432960 saturn notice 2005-05-02 03:56:59 MSWinEventLog 1
Security 67655 Mon May 02 03:55:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4E48889) Logon
Type: 3 59155
432959 saturn notice 2005-05-02 03:55:44 MSWinEventLog 1
Security 67654 Mon May 02 03:55:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4E48889) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59154
432958 saturn notice 2005-05-02 03:53:05 MSWinEventLog 1
Security 67653 Mon May 02 03:51:50 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4E37E30) Logon
Type: 3 59153
432957 saturn notice 2005-05-02 03:53:05 MSWinEventLog 1
Security 67652 Mon May 02 03:51:50 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4E37E30) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59152
432956 saturn notice 2005-05-02 03:53:05 MSWinEventLog 1
Security 67651 Mon May 02 03:51:50 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4E37DD6) Logon
Type: 3 59151
432955 saturn notice 2005-05-02 03:51:50 MSWinEventLog 1
Security 67650 Mon May 02 03:51:50 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4E37DD6) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59150
432954 saturn notice 2005-05-02 03:46:30 MSWinEventLog 1
Security 67649 Mon May 02 03:46:05 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4E1E87B) Logon
Type: 3 59149
432953 saturn notice 2005-05-02 03:46:30 MSWinEventLog 1
Security 67648 Mon May 02 03:46:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4E1E87B) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59148
432952 saturn notice 2005-05-02 03:46:30 MSWinEventLog 1
Security 67647 Mon May 02 03:46:05 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4E1E860) Logon
Type: 3 59147
432951 saturn notice 2005-05-02 03:46:05 MSWinEventLog 1
Security 67646 Mon May 02 03:46:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4E1E860) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59146
432950 saturn notice 2005-05-02 03:44:59 MSWinEventLog 1
Security 67645 Mon May 02 03:43:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4E152C0) Logon
Type: 3 59145
432949 saturn notice 2005-05-02 03:44:59 MSWinEventLog 1
Security 67644 Mon May 02 03:43:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4E152C0) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59144
432948 saturn notice 2005-05-02 03:44:59 MSWinEventLog 1
Security 67643 Mon May 02 03:43:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4E15287) Logon
Type: 3 59143
432947 saturn notice 2005-05-02 03:43:44 MSWinEventLog 1
Security 67642 Mon May 02 03:43:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4E15287) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59142
432946 saturn notice 2005-05-02 03:41:05 MSWinEventLog 1
Security 67641 Mon May 02 03:39:50 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4E03ED1) Logon
Type: 3 59141
432945 saturn notice 2005-05-02 03:41:05 MSWinEventLog 1
Security 67640 Mon May 02 03:39:50 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4E03ED1) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59140
432944 saturn notice 2005-05-02 03:41:05 MSWinEventLog 1
Security 67639 Mon May 02 03:39:50 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4E03E97) Logon
Type: 3 59139
432943 saturn notice 2005-05-02 03:39:50 MSWinEventLog 1
Security 67638 Mon May 02 03:39:50 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4E03E97) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59138
432942 saturn notice 2005-05-02 03:34:30 MSWinEventLog 1
Security 67637 Mon May 02 03:34:05 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4DEB140) Logon
Type: 3 59137
432941 saturn notice 2005-05-02 03:34:30 MSWinEventLog 1
Security 67636 Mon May 02 03:34:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4DEB140) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59136
432940 saturn notice 2005-05-02 03:34:30 MSWinEventLog 1
Security 67635 Mon May 02 03:34:05 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4DEB11E) Logon
Type: 3 59135
432939 saturn notice 2005-05-02 03:34:05 MSWinEventLog 1
Security 67634 Mon May 02 03:34:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4DEB11E) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59134
432938 saturn notice 2005-05-02 03:32:59 MSWinEventLog 1
Security 67633 Mon May 02 03:31:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4DE14DC) Logon
Type: 3 59133
432937 saturn notice 2005-05-02 03:32:59 MSWinEventLog 1
Security 67632 Mon May 02 03:31:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4DE14DC) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59132
432936 saturn notice 2005-05-02 03:32:59 MSWinEventLog 1
Security 67631 Mon May 02 03:31:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4DE14A2) Logon
Type: 3 59131
432935 saturn notice 2005-05-02 03:31:44 MSWinEventLog 1
Security 67630 Mon May 02 03:31:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4DE14A2) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59130
432934 saturn notice 2005-05-02 03:29:05 MSWinEventLog 1
Security 67629 Mon May 02 03:27:50 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4DCFB16) Logon
Type: 3 59129
432933 saturn notice 2005-05-02 03:29:05 MSWinEventLog 1
Security 67628 Mon May 02 03:27:50 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4DCFB16) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59128
432932 saturn notice 2005-05-02 03:29:05 MSWinEventLog 1
Security 67627 Mon May 02 03:27:50 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4DCFADC) Logon
Type: 3 59127
432931 saturn notice 2005-05-02 03:27:50 MSWinEventLog 1
Security 67626 Mon May 02 03:27:50 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4DCFADC) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59126
432930 saturn notice 2005-05-02 03:22:30 MSWinEventLog 1
Security 67625 Mon May 02 03:22:05 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4DB634A) Logon
Type: 3 59125
432929 saturn notice 2005-05-02 03:22:30 MSWinEventLog 1
Security 67624 Mon May 02 03:22:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4DB634A) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59124
432928 saturn notice 2005-05-02 03:22:30 MSWinEventLog 1
Security 67623 Mon May 02 03:22:05 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4DB6330) Logon
Type: 3 59123
432927 saturn notice 2005-05-02 03:22:05 MSWinEventLog 1
Security 67622 Mon May 02 03:22:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4DB6330) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59122
432926 saturn notice 2005-05-02 03:20:59 MSWinEventLog 1
Security 67621 Mon May 02 03:19:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4DACFA2) Logon
Type: 3 59121
432925 saturn notice 2005-05-02 03:20:59 MSWinEventLog 1
Security 67620 Mon May 02 03:19:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4DACFA2) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59120
432924 saturn notice 2005-05-02 03:20:59 MSWinEventLog 1
Security 67619 Mon May 02 03:19:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4DACF78) Logon
Type: 3 59119
432923 saturn notice 2005-05-02 03:19:44 MSWinEventLog 1
Security 67618 Mon May 02 03:19:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4DACF78) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59118
432922 saturn notice 2005-05-02 03:17:05 MSWinEventLog 1
Security 67617 Mon May 02 03:15:50 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4D9BC2B) Logon
Type: 3 59117
432921 saturn notice 2005-05-02 03:17:05 MSWinEventLog 1
Security 67616 Mon May 02 03:15:50 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4D9BC2B) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59116
432920 saturn notice 2005-05-02 03:17:05 MSWinEventLog 1
Security 67615 Mon May 02 03:15:50 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4D9BBF3) Logon
Type: 3 59115
432919 saturn notice 2005-05-02 03:15:50 MSWinEventLog 1
Security 67614 Mon May 02 03:15:50 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4D9BBF3) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59114
432918 saturn notice 2005-05-02 03:10:30 MSWinEventLog 1
Security 67613 Mon May 02 03:10:05 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4D82ADB) Logon
Type: 3 59113
432917 saturn notice 2005-05-02 03:10:30 MSWinEventLog 1
Security 67612 Mon May 02 03:10:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4D82ADB) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59112
432916 saturn notice 2005-05-02 03:10:30 MSWinEventLog 1
Security 67611 Mon May 02 03:10:05 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4D82ABF) Logon
Type: 3 59111
432915 saturn notice 2005-05-02 03:10:05 MSWinEventLog 1
Security 67610 Mon May 02 03:10:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4D82ABF) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59110
432914 saturn notice 2005-05-02 03:08:59 MSWinEventLog 1
Security 67609 Mon May 02 03:07:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4D78D64) Logon
Type: 3 59109
432913 saturn notice 2005-05-02 03:08:59 MSWinEventLog 1
Security 67608 Mon May 02 03:07:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4D78D64) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59108
432912 saturn notice 2005-05-02 03:08:59 MSWinEventLog 1
Security 67607 Mon May 02 03:07:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4D78D2A) Logon
Type: 3 59107
432911 saturn notice 2005-05-02 03:07:44 MSWinEventLog 1
Security 67606 Mon May 02 03:07:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4D78D2A) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59106
432910 saturn notice 2005-05-02 03:05:05 MSWinEventLog 1
Security 67605 Mon May 02 03:03:50 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4D67FA1) Logon
Type: 3 59105
432909 saturn notice 2005-05-02 03:05:05 MSWinEventLog 1
Security 67604 Mon May 02 03:03:50 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4D67FA1) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59104
432908 saturn notice 2005-05-02 03:05:05 MSWinEventLog 1
Security 67603 Mon May 02 03:03:50 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4D67F68) Logon
Type: 3 59103
432907 saturn notice 2005-05-02 03:03:50 MSWinEventLog 1
Security 67602 Mon May 02 03:03:50 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4D67F68) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59102
432906 saturn notice 2005-05-02 02:58:30 MSWinEventLog 1
Security 67601 Mon May 02 02:58:05 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4D4DB68) Logon
Type: 3 59101
432905 saturn notice 2005-05-02 02:58:30 MSWinEventLog 1
Security 67600 Mon May 02 02:58:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4D4DB68) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59100
432904 saturn notice 2005-05-02 02:58:30 MSWinEventLog 1
Security 67599 Mon May 02 02:58:05 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4D4DB46) Logon
Type: 3 59099
432903 saturn notice 2005-05-02 02:58:05 MSWinEventLog 1
Security 67598 Mon May 02 02:58:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4D4DB46) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59098
432902 saturn notice 2005-05-02 02:56:59 MSWinEventLog 1
Security 67597 Mon May 02 02:55:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4D4455A) Logon
Type: 3 59097
432901 saturn notice 2005-05-02 02:56:59 MSWinEventLog 1
Security 67596 Mon May 02 02:55:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4D4455A) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59096
432900 saturn notice 2005-05-02 02:56:59 MSWinEventLog 1
Security 67595 Mon May 02 02:55:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4D44535) Logon
Type: 3 59095
432899 saturn notice 2005-05-02 02:55:44 MSWinEventLog 1
Security 67594 Mon May 02 02:55:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4D44535) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59094
432898 saturn notice 2005-05-02 02:53:05 MSWinEventLog 1
Security 67593 Mon May 02 02:51:50 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4D32F71) Logon
Type: 3 59093
432897 saturn notice 2005-05-02 02:53:05 MSWinEventLog 1
Security 67592 Mon May 02 02:51:50 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4D32F71) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59092
432896 saturn notice 2005-05-02 02:53:05 MSWinEventLog 1
Security 67591 Mon May 02 02:51:50 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4D32F39) Logon
Type: 3 59091
432895 saturn notice 2005-05-02 02:51:50 MSWinEventLog 1
Security 67590 Mon May 02 02:51:50 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4D32F39) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59090
432894 saturn notice 2005-05-02 02:46:30 MSWinEventLog 1
Security 67589 Mon May 02 02:46:06 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4D1A542) Logon
Type: 3 59089
432893 saturn notice 2005-05-02 02:46:30 MSWinEventLog 1
Security 67588 Mon May 02 02:46:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4D1A542) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59088
432892 saturn notice 2005-05-02 02:46:30 MSWinEventLog 1
Security 67587 Mon May 02 02:46:05 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4D1A520) Logon
Type: 3 59087
432891 saturn notice 2005-05-02 02:46:05 MSWinEventLog 1
Security 67586 Mon May 02 02:46:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4D1A520) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59086
432890 saturn notice 2005-05-02 02:44:59 MSWinEventLog 1
Security 67585 Mon May 02 02:43:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4D11140) Logon
Type: 3 59085
432889 saturn notice 2005-05-02 02:44:59 MSWinEventLog 1
Security 67584 Mon May 02 02:43:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4D11140) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59084
432888 saturn notice 2005-05-02 02:44:59 MSWinEventLog 1
Security 67583 Mon May 02 02:43:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4D11106) Logon
Type: 3 59083
432887 saturn notice 2005-05-02 02:43:44 MSWinEventLog 1
Security 67582 Mon May 02 02:43:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4D11106) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59082
432886 saturn notice 2005-05-02 02:41:04 MSWinEventLog 1
Security 67581 Mon May 02 02:39:49 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4CFFB8A) Logon
Type: 3 59081
432885 saturn notice 2005-05-02 02:41:04 MSWinEventLog 1
Security 67580 Mon May 02 02:39:49 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4CFFB8A) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59080
432884 saturn notice 2005-05-02 02:41:04 MSWinEventLog 1
Security 67579 Mon May 02 02:39:49 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4CFFB51) Logon
Type: 3 59079
432883 saturn notice 2005-05-02 02:39:49 MSWinEventLog 1
Security 67578 Mon May 02 02:39:49 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4CFFB51) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59078
432882 saturn notice 2005-05-02 02:39:35 MSWinEventLog 1
Security 67577 Mon May 02 02:38:20 2005 538 Security
SYSTEM User Success Audit SATURN Logon/Logoff User
Logoff: User Name: SATURN$ Domain: CORP Logon ID:
(0x0,0xA4CF7F59) Logon Type: 3 59077
432881 saturn notice 2005-05-02 02:38:20 MSWinEventLog 1
Security 67576 Mon May 02 02:38:20 2005 540 Security
SYSTEM User Success Audit SATURN Logon/Logoff Successful
Network Logon: User Name: SATURN$ Domain: CORP Logon ID:
(0x0,0xA4CF7F59) Logon Type: 3 Logon Process: Kerberos
Authentication Package: Kerberos Workstation Name: Logon
GUID: {ebb7a621-7041-737f-9be1-fffa2c4747d9} Caller User
Name: - Caller Domain: - Caller Logon ID: - Caller
Process ID: - Transited Services: - Source Network
Address: - Source Port: - 59076
432880 saturn notice 2005-05-02 02:34:30 MSWinEventLog 1
Security 67575 Mon May 02 02:34:05 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4CE62DF) Logon
Type: 3 59075
432879 saturn notice 2005-05-02 02:34:30 MSWinEventLog 1
Security 67574 Mon May 02 02:34:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4CE62DF) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59074
432878 saturn notice 2005-05-02 02:34:30 MSWinEventLog 1
Security 67573 Mon May 02 02:34:05 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4CE62C2) Logon
Type: 3 59073
432877 saturn notice 2005-05-02 02:34:05 MSWinEventLog 1
Security 67572 Mon May 02 02:34:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4CE62C2) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59072
432876 saturn notice 2005-05-02 02:32:59 MSWinEventLog 1
Security 67571 Mon May 02 02:31:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4CDCC28) Logon
Type: 3 59071
432875 saturn notice 2005-05-02 02:32:59 MSWinEventLog 1
Security 67570 Mon May 02 02:31:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4CDCC28) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59070
432874 saturn notice 2005-05-02 02:32:59 MSWinEventLog 1
Security 67569 Mon May 02 02:31:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4CDCBF1) Logon
Type: 3 59069
432873 saturn notice 2005-05-02 02:31:44 MSWinEventLog 1
Security 67568 Mon May 02 02:31:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4CDCBF1) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59068
432872 saturn notice 2005-05-02 02:29:04 MSWinEventLog 1
Security 67567 Mon May 02 02:27:49 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4CCAD4E) Logon
Type: 3 59067
432871 saturn notice 2005-05-02 02:29:04 MSWinEventLog 1
Security 67566 Mon May 02 02:27:49 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4CCAD4E) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59066
432870 saturn notice 2005-05-02 02:29:04 MSWinEventLog 1
Security 67565 Mon May 02 02:27:49 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4CCAD13) Logon
Type: 3 59065
432869 saturn notice 2005-05-02 02:27:49 MSWinEventLog 1
Security 67564 Mon May 02 02:27:49 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4CCAD13) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59064
432868 saturn notice 2005-05-02 02:22:30 MSWinEventLog 1
Security 67563 Mon May 02 02:22:05 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4CB1C86) Logon
Type: 3 59063
432867 saturn notice 2005-05-02 02:22:30 MSWinEventLog 1
Security 67562 Mon May 02 02:22:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4CB1C86) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59062
432866 saturn notice 2005-05-02 02:22:30 MSWinEventLog 1
Security 67561 Mon May 02 02:22:05 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4CB1C6C) Logon
Type: 3 59061
432865 saturn notice 2005-05-02 02:22:05 MSWinEventLog 1
Security 67560 Mon May 02 02:22:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4CB1C6C) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59060
432864 saturn notice 2005-05-02 02:20:59 MSWinEventLog 1
Security 67559 Mon May 02 02:19:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4CA8772) Logon
Type: 3 59059
432863 saturn notice 2005-05-02 02:20:59 MSWinEventLog 1
Security 67558 Mon May 02 02:19:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4CA8772) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59058
432862 saturn notice 2005-05-02 02:20:59 MSWinEventLog 1
Security 67557 Mon May 02 02:19:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4CA873B) Logon
Type: 3 59057
432861 saturn notice 2005-05-02 02:19:44 MSWinEventLog 1
Security 67556 Mon May 02 02:19:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4CA873B) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59056
432860 saturn notice 2005-05-02 02:17:04 MSWinEventLog 1
Security 67555 Mon May 02 02:15:49 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4C97320) Logon
Type: 3 59055
432859 saturn notice 2005-05-02 02:17:04 MSWinEventLog 1
Security 67554 Mon May 02 02:15:49 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4C97320) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59054
432858 saturn notice 2005-05-02 02:17:04 MSWinEventLog 1
Security 67553 Mon May 02 02:15:49 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4C972E8) Logon
Type: 3 59053
432857 saturn notice 2005-05-02 02:15:49 MSWinEventLog 1
Security 67552 Mon May 02 02:15:49 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4C972E8) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59052
432856 saturn notice 2005-05-02 02:10:30 MSWinEventLog 1
Security 67551 Mon May 02 02:10:05 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4C7F26C) Logon
Type: 3 59051
432855 saturn notice 2005-05-02 02:10:30 MSWinEventLog 1
Security 67550 Mon May 02 02:10:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4C7F26C) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59050
432854 saturn notice 2005-05-02 02:10:30 MSWinEventLog 1
Security 67549 Mon May 02 02:10:05 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4C7F191) Logon
Type: 3 59049
432853 saturn notice 2005-05-02 02:10:05 MSWinEventLog 1
Security 67548 Mon May 02 02:10:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4C7F191) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59048
432852 saturn notice 2005-05-02 02:08:59 MSWinEventLog 1
Security 67547 Mon May 02 02:07:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4C74556) Logon
Type: 3 59047
432851 saturn notice 2005-05-02 02:08:59 MSWinEventLog 1
Security 67546 Mon May 02 02:07:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4C74556) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59046
432850 saturn notice 2005-05-02 02:08:59 MSWinEventLog 1
Security 67545 Mon May 02 02:07:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4C7451E) Logon
Type: 3 59045
432849 saturn notice 2005-05-02 02:07:44 MSWinEventLog 1
Security 67544 Mon May 02 02:07:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4C7451E) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59044
432848 saturn notice 2005-05-02 02:05:04 MSWinEventLog 1
Security 67543 Mon May 02 02:03:49 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4C631C4) Logon
Type: 3 59043
432847 saturn notice 2005-05-02 02:05:04 MSWinEventLog 1
Security 67542 Mon May 02 02:03:49 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4C631C4) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59042
432846 saturn notice 2005-05-02 02:05:04 MSWinEventLog 1
Security 67541 Mon May 02 02:03:49 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4C63199) Logon
Type: 3 59041
432845 saturn notice 2005-05-02 02:03:49 MSWinEventLog 1
Security 67540 Mon May 02 02:03:49 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4C63199) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
JUPITER Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.115
Source Port: 0 59040
432844 saturn notice 2005-05-02 01:58:30 MSWinEventLog 1
Security 67539 Mon May 02 01:58:05 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4C4E10D) Logon
Type: 3 59039
432843 saturn notice 2005-05-02 01:58:30 MSWinEventLog 1
Security 67538 Mon May 02 01:58:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4C4E10D) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59038
432842 saturn notice 2005-05-02 01:58:30 MSWinEventLog 1
Security 67537 Mon May 02 01:58:05 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4C4E0F1) Logon
Type: 3 59037
432841 saturn notice 2005-05-02 01:58:05 MSWinEventLog 1
Security 67536 Mon May 02 01:58:05 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4C4E0F1) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
ENTERPRISE Logon GUID: - Caller User Name: - Caller
Domain: - Caller Logon ID: - Caller Process ID: -
Transited Services: - Source Network Address:
192.168.144.209 Source Port: 0 59036
432840 saturn notice 2005-05-02 01:56:59 MSWinEventLog 1
Security 67535 Mon May 02 01:55:44 2005 538 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff User Logoff: User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY Logon ID: (0x0,0xA4C3FE4E) Logon
Type: 3 59035
432839 saturn notice 2005-05-02 01:56:59 MSWinEventLog 1
Security 67534 Mon May 02 01:55:44 2005 540 Security
ANONYMOUS LOGON Well Known Group Success Audit SATURN
Logon/Logoff Successful Network Logon: User Name: Domain:
Logon ID: (0x0,0xA4C3FE4E) Logon Type: 3 Logon Process:
NtLmSsp Authentication Package: NTLM Workstation Name:
MERCURY Logon GUID: - Caller User Name: - Caller Domain: -
Caller Logon ID: - Caller Process ID: - Transited
Services: - Source Network Address: 192.168.144.252
Source Port: 0 59034