Below is a list of the last 500 suspicious interactions with this IP.
Last observed Sun, 09 Aug 2026 09:19:03 (Australia/Brisbane)
| Description | Count |
|---|---|
| ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | 360 |
| ET INFO WinRM wsman Access - Possible Lateral Movement | 360 |
| Timestamp | Description | Protocol | Destination Port |
|---|---|---|---|
| 2026-08-09 09:19:03 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 09:19:03 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 09:19:03 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 09:19:03 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 09:19:02 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 09:19:02 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 09:19:02 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 09:19:02 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 08:58:51 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 08:58:51 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 08:58:51 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 08:58:51 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 08:58:51 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 08:58:51 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 08:58:51 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 08:58:51 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 07:56:11 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 07:56:11 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 07:56:11 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 07:56:11 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 07:56:11 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 07:56:11 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 07:56:11 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 07:56:11 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 07:26:23 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 07:26:23 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 07:26:23 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 07:26:23 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 07:26:22 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 07:26:22 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 07:26:22 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 07:26:22 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 07:05:10 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 07:05:10 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 07:05:10 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 07:05:10 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 07:05:10 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 07:05:10 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 07:05:10 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 07:05:10 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 06:22:30 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 06:22:30 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 06:22:30 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 06:22:30 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 06:22:30 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 06:22:30 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 06:22:30 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 06:22:30 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 05:51:08 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 05:51:08 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 05:51:08 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 05:51:08 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 05:51:08 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 05:51:08 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 05:51:08 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 05:51:08 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 05:11:26 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 05:11:26 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 05:11:26 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 05:11:26 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 05:11:25 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 05:11:25 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 05:11:25 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 05:11:25 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 04:50:46 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 04:50:46 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 04:50:46 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 04:50:46 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 04:50:46 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 04:50:46 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 04:50:46 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 04:50:46 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 04:15:02 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 04:15:02 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 04:15:02 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 04:15:02 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 04:15:01 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 04:15:01 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 04:15:01 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 04:15:01 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 02:59:23 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 02:59:23 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 02:59:23 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 02:59:23 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 02:59:23 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 02:59:23 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 02:59:23 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 02:59:23 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 02:36:58 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 02:36:58 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 02:36:58 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 02:36:58 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 02:36:58 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 02:36:58 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 02:36:58 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 02:36:58 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 02:18:41 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 02:18:41 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 02:18:41 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 02:18:41 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 02:18:40 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 02:18:40 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 02:18:40 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 02:18:40 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 01:43:41 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 01:43:41 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 01:43:41 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 01:43:41 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 01:43:41 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 01:43:41 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 01:43:41 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 01:43:41 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 23:11:33 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 23:11:33 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 23:11:33 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 23:11:33 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 23:11:33 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 23:11:33 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 23:11:33 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 23:11:33 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 21:42:09 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 21:42:09 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 21:42:09 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 21:42:09 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 21:42:09 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 21:42:09 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 21:42:09 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 21:42:09 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 21:07:00 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 21:07:00 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 21:07:00 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 21:07:00 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 21:06:59 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 21:06:59 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 21:06:59 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 21:06:59 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 19:50:40 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 19:50:40 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 19:50:40 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 19:50:40 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 19:50:40 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 19:50:40 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 19:50:40 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 19:50:40 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 14:53:57 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 14:53:57 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 14:53:57 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 14:53:57 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 14:53:57 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 14:53:57 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 14:53:57 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 14:53:57 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 14:31:31 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 14:31:31 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 14:31:31 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 14:31:31 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 14:31:31 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 14:31:31 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 14:31:31 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 14:31:31 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 13:55:19 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 13:55:19 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 13:55:19 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 13:55:19 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 13:55:19 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 13:55:19 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 13:55:19 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 13:55:19 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 13:16:27 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 13:16:27 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 13:16:27 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 13:16:27 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 13:16:27 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 13:16:27 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 13:16:27 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 13:16:27 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:51:23 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:51:23 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:51:23 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:51:23 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:51:23 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:51:23 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:51:23 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:51:23 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:10:15 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:10:15 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:10:15 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:10:15 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:10:15 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:10:15 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:10:15 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:10:15 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 11:09:58 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 11:09:58 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 11:09:58 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 11:09:58 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 11:09:58 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 11:09:58 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 11:09:58 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 11:09:58 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 10:46:53 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 10:46:53 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 10:46:53 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 10:46:53 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 10:46:53 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 10:46:53 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 10:46:53 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 10:46:53 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 10:09:05 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 10:09:05 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 10:09:05 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 10:09:05 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 10:09:05 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 10:09:05 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 10:09:05 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 10:09:05 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 09:37:52 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 09:37:52 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 09:37:52 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 09:37:52 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 09:37:52 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 09:37:52 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 09:37:52 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 09:37:52 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 09:21:30 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 09:21:30 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 09:21:30 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 09:21:30 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 09:21:29 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 09:21:29 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 09:21:29 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 09:21:29 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:40:55 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:40:55 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:40:55 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:40:55 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:40:54 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:40:54 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:40:54 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:40:54 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:12:32 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:12:32 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:12:32 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:12:32 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:12:32 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:12:32 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:12:32 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:12:32 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:50:27 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:50:27 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:50:27 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:50:27 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:50:27 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:50:27 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:50:27 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:50:27 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:05:26 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:05:26 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:05:26 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:05:26 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:05:26 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:05:26 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:05:26 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:05:26 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 06:45:18 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 06:45:18 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 06:45:18 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 06:45:18 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 06:45:18 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 06:45:18 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 06:45:18 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 06:45:18 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 06:00:25 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 06:00:25 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 06:00:25 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 06:00:25 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 06:00:25 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 06:00:25 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 06:00:25 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 06:00:25 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 05:20:56 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 05:20:56 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 05:20:56 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 05:20:56 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 05:20:55 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 05:20:55 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 05:20:55 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 05:20:55 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 05:00:12 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 05:00:12 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 05:00:12 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 05:00:12 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 05:00:12 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 05:00:12 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 05:00:12 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 05:00:12 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 04:23:03 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 04:23:03 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 04:23:03 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 04:23:03 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 04:23:03 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 04:23:03 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 04:23:03 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 04:23:03 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 03:10:23 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 03:10:23 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 03:10:23 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 03:10:23 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 03:10:23 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 03:10:23 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 03:10:23 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 03:10:23 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-07 23:51:04 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-07 23:51:04 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-07 23:51:04 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-07 23:51:04 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-07 23:51:04 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-07 23:51:04 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-07 23:51:04 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-07 23:51:04 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-07 23:21:26 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-07 23:21:26 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-07 23:21:26 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-07 23:21:26 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-07 23:21:26 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-07 23:21:26 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-07 23:21:26 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-07 23:21:26 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-07 22:33:14 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-07 22:33:14 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-07 22:33:14 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-07 22:33:14 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-07 22:33:13 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-07 22:33:13 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-07 22:33:13 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-07 22:33:13 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-20 20:30:26 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-20 20:30:26 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-20 20:30:26 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-20 20:30:26 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-20 19:55:35 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-20 19:55:35 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-20 19:55:35 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-20 19:55:35 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 07:17:37 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 07:17:37 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 07:17:37 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 07:17:37 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 07:16:03 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 07:16:03 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 07:16:03 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 07:16:03 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 07:01:56 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 07:01:56 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 07:01:56 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 07:01:56 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:54:04 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:54:04 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:54:04 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:54:04 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:54:04 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:54:04 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:54:04 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:54:04 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:54:03 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:54:03 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:54:03 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:54:03 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:54:03 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:54:03 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:54:03 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:54:03 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:27:39 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:27:39 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:27:39 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:27:39 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:27:39 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:27:39 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:27:39 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:27:39 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:27:38 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:27:38 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:27:38 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:27:38 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:27:38 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:27:38 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:27:38 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:27:38 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:17:21 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:17:21 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:17:20 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:17:20 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:13:13 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:13:13 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:13:12 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:13:12 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 05:51:59 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 05:51:59 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 05:51:59 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 05:51:59 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 05:51:58 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 05:51:58 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 05:51:58 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 05:51:58 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 05:38:03 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 05:38:03 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 05:38:02 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 05:38:02 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 05:19:45 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 05:19:45 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 05:19:45 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 05:19:45 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 05:19:44 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 05:19:44 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 05:19:44 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 05:19:44 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 05:06:55 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 05:06:55 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 05:06:55 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 05:06:55 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 05:00:17 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 05:00:17 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 05:00:17 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 05:00:17 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:51:25 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:51:25 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:51:25 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:51:25 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:51:25 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:51:25 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:51:25 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:51:25 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:49:33 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:49:33 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:49:33 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:49:33 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:40:11 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:40:11 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:40:10 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:40:10 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:40:00 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:40:00 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:39:59 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:39:59 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:32:58 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:32:58 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:32:58 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:32:58 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:32:58 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:32:58 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:32:58 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:32:58 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:32:57 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:32:57 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:32:57 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:32:57 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:32:57 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:32:57 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:32:57 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:32:57 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:31:16 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:31:16 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:31:16 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:31:16 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:12:10 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:12:10 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:12:10 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:12:10 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:12:10 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:12:10 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:12:10 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:12:10 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:10:54 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:10:54 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:10:54 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:10:54 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:03:51 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:03:51 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:03:51 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:03:51 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 03:44:22 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 03:44:22 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 03:44:21 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 03:44:21 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 03:42:57 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 03:42:57 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 03:42:57 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 03:42:57 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 03:39:36 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 03:39:36 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 03:39:36 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 03:39:36 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 03:35:37 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 03:35:37 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 03:35:37 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 03:35:37 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 03:35:30 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 03:35:30 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 03:35:29 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 03:35:29 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
Back to top