Below is a list of the last 500 suspicious interactions with this IP.
Last observed Mon, 17 Aug 2026 01:58:16 (Australia/Brisbane)
| Description | Count |
|---|---|
| ET INFO WinRM wsman Access - Possible Lateral Movement | 285 |
| ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | 285 |
| Timestamp | Description | Protocol | Destination Port |
|---|---|---|---|
| 2026-08-17 01:58:16 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 80 |
| 2026-08-17 01:58:16 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 80 |
| 2026-08-14 23:01:48 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 23:01:48 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 23:01:48 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 23:01:48 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 23:01:48 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 23:01:48 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 23:01:48 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 23:01:48 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 22:43:22 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 22:43:22 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 22:43:22 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 22:43:22 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 22:43:22 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 22:43:22 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 22:43:21 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 22:43:21 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 22:18:02 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 22:18:02 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 22:18:02 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 22:18:02 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 22:18:02 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 22:18:02 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 22:18:02 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 22:18:02 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 21:41:42 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 21:41:42 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 21:41:42 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 21:41:42 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 21:41:42 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 21:41:42 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 21:41:42 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 21:41:42 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 21:06:48 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 21:06:48 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 21:06:48 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 21:06:48 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 21:06:48 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 21:06:48 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 21:06:48 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 21:06:48 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 03:34:29 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 03:34:29 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 03:34:29 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 03:34:29 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 03:34:29 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 03:34:29 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 03:34:29 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 03:34:29 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 03:02:42 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 03:02:42 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 03:02:42 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 03:02:42 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 03:02:42 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 03:02:42 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 03:02:42 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 03:02:42 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-12 03:40:38 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-12 03:40:38 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-12 03:40:38 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-12 03:40:38 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-12 03:40:38 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-12 03:40:38 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-12 03:40:38 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-12 03:40:38 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 21:16:41 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 21:16:41 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 21:16:41 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 21:16:41 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 21:16:40 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 21:16:40 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 21:16:40 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 21:16:40 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 20:48:49 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 20:48:49 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 20:48:49 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 20:48:49 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 20:48:49 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 20:48:49 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 20:48:49 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 20:48:49 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 20:18:43 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 20:18:43 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 20:18:43 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 20:18:43 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 20:18:43 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 20:18:43 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 20:18:43 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 20:18:43 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 08:36:03 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 08:36:03 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 08:36:03 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 08:36:03 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 08:36:03 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 08:36:03 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 08:36:03 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 08:36:03 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 08:03:55 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 08:03:55 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 08:03:55 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 08:03:55 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 08:03:55 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 08:03:55 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 08:03:55 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 08:03:55 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 07:31:30 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 07:31:30 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 07:31:30 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 07:31:30 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 07:31:30 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 07:31:30 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 07:31:30 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 07:31:30 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 07:11:17 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 07:11:17 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 07:11:17 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 07:11:17 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 06:10:47 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 06:10:47 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 06:10:47 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 06:10:47 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 05:42:11 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 05:42:11 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 05:42:11 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 05:42:11 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 05:42:11 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 05:42:11 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 05:42:11 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 05:42:11 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 05:14:16 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 05:14:16 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 05:14:16 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 05:14:16 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 05:14:16 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 05:14:16 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 05:14:16 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 05:14:16 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 04:37:18 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 04:37:18 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 04:37:18 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 04:37:18 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 04:37:17 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 04:37:17 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 04:37:17 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 04:37:17 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 04:21:14 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 04:21:14 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 04:21:14 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 04:21:14 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 04:21:14 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 04:21:14 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 04:21:14 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 04:21:14 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 09:07:53 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 09:07:53 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 09:07:53 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 09:07:53 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 09:07:52 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 09:07:52 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 09:07:52 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 09:07:52 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 08:49:48 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 08:49:48 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 08:49:48 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 08:49:48 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 08:49:48 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 08:49:48 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 08:49:48 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 08:49:48 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 08:29:28 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 08:29:28 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 08:29:28 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 08:29:28 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 08:29:27 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 08:29:27 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 08:29:27 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 08:29:27 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 08:13:01 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 08:13:01 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 08:13:01 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 08:13:01 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 08:13:00 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 08:13:00 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 08:13:00 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 08:13:00 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 07:43:05 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 07:43:05 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 07:43:05 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 07:43:05 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 07:43:04 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 07:43:04 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 07:43:04 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 07:43:04 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 07:21:21 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 07:21:21 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 07:21:21 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 07:21:21 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 07:21:21 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 07:21:21 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 07:21:21 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 07:21:21 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 06:54:07 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 06:54:07 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 06:54:07 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 06:54:07 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 06:54:07 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 06:54:07 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 06:54:07 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 06:54:07 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 06:37:33 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 06:37:33 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 06:37:33 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 06:37:33 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 06:37:33 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 06:37:33 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 06:37:33 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 06:37:33 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 05:51:15 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 05:51:15 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 05:51:15 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 05:51:15 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 05:51:14 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 05:51:14 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 05:51:14 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 05:51:14 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 05:16:33 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 05:16:33 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 05:16:33 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 05:16:33 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 05:16:33 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 05:16:33 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 05:16:33 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 05:16:33 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 04:48:47 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 04:48:47 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 04:48:47 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 04:48:47 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 04:48:47 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 04:48:47 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 04:48:47 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 04:48:47 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 04:25:52 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 04:25:52 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 04:25:52 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 04:25:52 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 04:25:52 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 04:25:52 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 04:25:52 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 04:25:52 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 04:08:32 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 04:08:32 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 04:08:32 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 04:08:32 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 04:08:32 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 04:08:32 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 04:08:32 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 04:08:32 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 02:40:31 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 02:40:31 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 02:40:31 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 02:40:31 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 02:40:30 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 02:40:30 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 02:40:30 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 02:40:30 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 02:04:23 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 02:04:23 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 02:04:23 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 02:04:23 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 02:04:22 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 02:04:22 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 02:04:22 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 02:04:22 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 01:46:13 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 01:46:13 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 01:46:13 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 01:46:13 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 01:46:13 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 01:46:13 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 01:46:13 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 01:46:13 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 23:11:01 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 23:11:01 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 23:11:01 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 23:11:01 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 23:11:01 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 23:11:01 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 23:11:01 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 23:11:01 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 21:46:20 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 21:46:20 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 21:46:20 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 21:46:20 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 21:46:20 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 21:46:20 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 21:46:20 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 21:46:20 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 21:17:44 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 21:17:44 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 21:17:44 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 21:17:44 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 21:17:44 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 21:17:44 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 21:17:44 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 21:17:44 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 20:22:24 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 20:22:24 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 20:22:24 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 20:22:24 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 20:22:24 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 20:22:24 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 20:22:24 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 20:22:24 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 20:00:13 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 20:00:13 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 20:00:13 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 20:00:13 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 20:00:13 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 20:00:13 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 20:00:13 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 20:00:13 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 19:39:44 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 19:39:44 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 19:39:44 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 19:39:44 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 19:39:44 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 19:39:44 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 19:39:44 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 19:39:44 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 19:22:10 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 19:22:10 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 19:22:10 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 19:22:10 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 19:22:10 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 19:22:10 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 19:22:10 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 19:22:10 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 18:58:08 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 18:58:08 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 18:58:08 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 18:58:08 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 18:58:08 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 18:58:08 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 18:58:08 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 18:58:08 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 17:10:38 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 17:10:38 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 17:10:38 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 17:10:38 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 17:10:38 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 17:10:38 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 17:10:38 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 17:10:38 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 16:49:06 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 16:49:06 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 16:49:06 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 16:49:06 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 16:49:06 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 16:49:06 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 16:49:06 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 16:49:06 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 16:25:21 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 16:25:21 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 16:25:21 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 16:25:21 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 16:25:21 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 16:25:21 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 16:25:21 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 16:25:21 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 15:54:55 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 15:54:55 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 15:54:55 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 15:54:55 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 15:54:55 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 15:54:55 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 15:54:55 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 15:54:55 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 15:37:01 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 15:37:01 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 15:37:01 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 15:37:01 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 15:37:00 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 15:37:00 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 15:37:00 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 15:37:00 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 14:12:49 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 14:12:49 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 14:12:49 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 14:12:49 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 14:12:49 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 14:12:49 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 14:12:49 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 14:12:49 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 13:42:22 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 13:42:22 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 13:42:22 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 13:42:22 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 13:42:22 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 13:42:22 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 13:42:22 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 13:42:22 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 13:21:59 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 13:21:59 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 13:21:59 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 13:21:59 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 13:21:59 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 13:21:59 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 13:21:59 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 13:21:59 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:52:03 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:52:03 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:52:03 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:52:03 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:52:03 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:52:03 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:52:03 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:52:03 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:29:12 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:29:12 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:29:12 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:29:12 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:29:11 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:29:11 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:29:11 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:29:11 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:07:05 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:07:05 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:07:05 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:07:05 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:07:05 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:07:05 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:07:05 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:07:05 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 11:01:18 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 11:01:18 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 11:01:18 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 11:01:18 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 11:01:18 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 11:01:18 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 11:01:18 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 11:01:18 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 10:15:04 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 10:15:04 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 10:15:04 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 10:15:04 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 10:15:04 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 10:15:04 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 10:15:04 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 10:15:04 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 09:32:46 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 09:32:46 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 09:32:46 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 09:32:46 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 09:32:46 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 09:32:46 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 09:32:46 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 09:32:46 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 09:13:11 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 09:13:11 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 09:13:11 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 09:13:11 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 09:13:11 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 09:13:11 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 09:13:11 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 09:13:11 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:42:32 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:42:32 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:42:32 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:42:32 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:42:32 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:42:32 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:42:32 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:42:32 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:07:10 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:07:10 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:07:10 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:07:10 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:07:10 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:07:10 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:07:10 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:07:10 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:49:05 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:49:05 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:49:05 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:49:05 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:49:05 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:49:05 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:49:05 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:49:05 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:29:18 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:29:18 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:29:18 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:29:18 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:29:18 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:29:18 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:29:18 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:29:18 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:06:08 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:06:08 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
Back to top