{
  "Category": 13825,
  "CategoryString": "-",
  "ComputerName": "2012-DC.AD2012.ru",
  "Data": null,
  "EventCode": 4742,
  "EventIdentifier": 4742,
  "EventType": "4",
  "InsertionStrings": [
    "-",
    "2012-DC$",
    "AD2012",
    "S-1-5-21-3725810923-1556733292-2669249330-1001",
    "S-1-5-21-3725810923-1556733292-2669249330-1001",
    "2012-DC$",
    "AD2012",
    "0x14e04af",
    "-",
    "-",
    "-",
    "-",
    "-",
    "-",
    "-",
    "-",
    "-",
    "-",
    "-",
    "-",
    "-",
    "-",
    "-",
    "-",
    "-",
    "-",
    "-",
    "-",
    "ldap/2012-DC.AD2012.ru/AD2012.ruldap/2012-DC.AD2012.ruldap/2012-DCldap/2012-DC.AD2012.ru/AD2012ldap/187cbecd-8461-4d2d-a8fb-67b9838274c8._msdcs.AD2012.ruldap/2012-DC/AD2012E3514235-4B06-11D1-AB04-00C04FC2DCD2/187cbecd-8461-4d2d-a8fb-67b9838274c8/AD2012.ruHOST/2012-DC.AD2012.ru/AD2012.ruHOST/2012-DC.AD2012.ruHOST/2012-DCHOST/2012-DC.AD2012.ru/AD2012HOST/2012-DC/AD2012RPC/187cbecd-8461-4d2d-a8fb-67b9838274c8._msdcs.AD2012.ruRestrictedKrbHost/2012-DCRestrictedKrbHost/2012-DC.AD2012.ruGC/2012-DC.AD2012.ru/AD2012.ruDNS/2012-DC.AD2012.ruTERMSRV/2012-DC.AD2012.ruTERMSRV/2012-DCldap/2012-DC.AD2012.ru/DomainDnsZones.AD2012.ruldap/2012-DC.AD2012.ru/ForestDnsZones.AD2012.ruDfsr-12F9A27C-BF97-4787-9364-D31B6C55EB04/2012-DC.AD2012.ruSMTPSVC/2012-DC.AD2012.ruSMTPSVC/2012-DCE3514235-4B06-11D1-AB04-00C04FC2DCD2-ADAM/2012-DC:50000E3514235-4B06-11D1-AB04-00C04FC2DCD2-ADAM/2012-DC.AD2012.ru:50000exchangeAB/2012-DC.AD2012.ruexchangeAB/2012-DCWSMAN/2012-DCWSMAN/2012-DC.AD2012.ruldap/2012-DC:50000ldap/2012-DC.AD2012.ru:50000"
  ],
  "Logfile": "Security",
  "Message": "-",
  "RecordNumber": 808599,
  "SourceName": "Microsoft-Windows-Security-Auditing",
  "TimeGenerated": "2015-12-09 08:06:35",
  "TimeWritten": "2015-12-09 08:06:35",
  "Type": "Audit Success",
  "User": null
}