▲ 4 r/sysadmin
Weird TGT account name in event viewer
Seeing a lot of strange TGT events in event viewer on DC.
Event 4768
Account name: @@CyBAAAA….
Next even 4768 had just “@“ as account name
Trying to figure out what was the source of it. All events happened in the same time frame and originated from a file server.
Happened about 10 days ago and never since. Trying to pinpoint what was the source of it exactly. Anyone say anything like this?
u/Casual_Spy — 8 days ago