Figure 1:  A Kerberos authentication event<br><br>
Event Type:  Success Audit<br>
Event Source: Security<br>
Event Category: Account Logon <br>
Event ID: 672<br>
Date: 2/10/2004<br>
Time: 7:04:26 PM<br>
User: NT AUTHORITY\SYSTEM<br>
Computer: W03-IMAGE<br>
Description:<br>
Authentication Ticket Request:<br>
User Name:  Administrator<br>
Supplied Realm Name:  ACME.LOCAL<br>
User ID:  ACME\administrator<br>
Service Name:  krbtgt<br>
Service ID:  ACME\krbtgt<br>
Ticket Options:  0x40810010<br>
Result Code:  &#173;<br>
Ticket Encryption Type:  0x17<br>
Pre-Authentication Type:  2<br>
Client Address:  10.42.42.101<br>
Certificate Issuer Name:<br>
 Certificate Serial Number:<br>
 Certificate Thumbprint:<br>