{
    "Computer":  "MS1",
    "User":  "dana.diaz",
    "BaselineLogon":  true,
    "StartedAt":  "2026-11-01T12:13:05.4681089Z",
    "Attempts":  [
                     {
                         "Attempt":  1,
                         "Succeeded":  false,
                         "WindowsError":  1326,
                         "Time":  "2026-11-01T12:13:05.7030798Z"
                     },
                     {
                         "Attempt":  2,
                         "Succeeded":  false,
                         "WindowsError":  1326,
                         "Time":  "2026-11-01T12:13:05.7622963Z"
                     },
                     {
                         "Attempt":  3,
                         "Succeeded":  false,
                         "WindowsError":  1326,
                         "Time":  "2026-11-01T12:13:05.8183768Z"
                     },
                     {
                         "Attempt":  4,
                         "Succeeded":  false,
                         "WindowsError":  1326,
                         "Time":  "2026-11-01T12:13:05.8869528Z"
                     },
                     {
                         "Attempt":  5,
                         "Succeeded":  false,
                         "WindowsError":  1326,
                         "Time":  "2026-11-01T12:13:05.9584105Z"
                     }
                 ],
    "Matching4624Events":  1,
    "Matching4625Events":  5,
    "Note":  "Five controlled wrong-password attempts against one disposable lab identity. DC lockout verification is separate."
}