Regex Tester & Validator

Matches audit log lines tagged <AUDT:INFO> that record a successful Active Directory login through a WebUI. It captures named groups for the date, destination IP, the account name, and the quoted source IP of the connecting user. Typically used in SIEM pipelines or security monitoring to parse authentication events from multiline audit log files.