[BUG] Kerberos Pre-Authentication Flag Disabled in UserAccountControl #3566
Description
If you have a Splunk Support contract, creating a support case for your issue may result in faster resolution.
Describe the bug
This dataset is still using the multi-line Windows Event Logs
Expected behavior
Regenerate dataset & update search to use XMLWinEventLog
Screenshots
If applicable, add screenshots to help explain your problem.
App Version:
- ESCU: 5.7.0
Additional context
Add any other context about the problem here.