Below is a list of the last 500 suspicious interactions with this IP.
Last observed Mon, 06 Jul 2026 16:31:46 (Australia/Brisbane)
| Description | Count |
|---|---|
| ET INFO WinRM wsman Access - Possible Lateral Movement | 368 |
| ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | 368 |
| Timestamp | Description | Protocol | Destination Port |
|---|---|---|---|
| 2026-07-06 16:31:46 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 16:31:46 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 16:31:46 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 16:31:46 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 16:29:03 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 16:29:03 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 16:29:03 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 16:29:03 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 16:29:03 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 16:29:03 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 16:29:03 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 16:29:03 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 16:29:03 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 16:29:03 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 16:29:03 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 16:29:03 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 16:29:03 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 16:29:03 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 16:29:03 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 16:29:03 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 10:56:46 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 10:56:46 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 10:56:46 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 10:56:46 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 10:56:46 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 10:56:46 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 10:56:46 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 10:56:46 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 10:56:46 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 10:56:46 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 10:56:46 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 10:56:46 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 10:56:46 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 10:56:46 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 10:56:46 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 10:56:46 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 10:21:41 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 10:21:41 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 10:21:41 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 10:21:41 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 10:21:41 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 10:21:41 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 10:21:41 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 10:21:41 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 10:21:41 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 10:21:41 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 10:21:41 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 10:21:41 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 10:21:41 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 10:21:41 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 10:21:41 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 10:21:41 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 10:06:46 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 10:06:46 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 10:06:46 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 10:06:46 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 06:54:19 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 06:54:19 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 06:54:19 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 06:54:19 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 06:54:19 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 06:54:19 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 06:54:19 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 06:54:19 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 06:54:19 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 06:54:19 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 06:54:19 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 06:54:19 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 06:54:19 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 06:54:19 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 06:54:19 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 06:54:19 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 06:39:54 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 06:39:54 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 06:39:54 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 06:39:54 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 06:05:52 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 06:05:52 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 06:05:51 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 06:05:51 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 06:05:51 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 06:05:51 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 06:05:50 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 06:05:50 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 05:05:02 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 05:05:02 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 05:05:02 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 05:05:02 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 05:05:02 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 05:05:02 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 05:05:02 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 05:05:02 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 04:52:49 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 04:52:49 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 04:52:49 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 04:52:49 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 02:14:03 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 02:14:03 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 02:14:03 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 02:14:03 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 02:14:03 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 02:14:03 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 02:14:03 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 02:14:03 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 02:14:02 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 02:14:02 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 02:14:02 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 02:14:02 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 02:14:02 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 02:14:02 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 02:14:02 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 02:14:02 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 00:45:00 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 00:45:00 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 00:45:00 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-06 00:45:00 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 23:57:15 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 23:57:15 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 23:57:15 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 23:57:15 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 23:57:15 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 23:57:15 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 23:57:15 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 23:57:15 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 23:57:14 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 23:57:14 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 23:57:14 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 23:57:14 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 23:57:14 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 23:57:14 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 23:57:14 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 23:57:14 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 23:18:03 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 23:18:03 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 23:18:03 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 23:18:03 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 23:18:03 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 23:18:03 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 23:18:03 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 23:18:03 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 23:18:03 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 23:18:03 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 23:18:03 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 23:18:03 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 23:18:03 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 23:18:03 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 23:18:03 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 23:18:03 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 23:04:47 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 23:04:47 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 23:04:47 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 23:04:47 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 22:13:44 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 22:13:44 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 22:13:44 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 22:13:44 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 22:13:44 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 22:13:44 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 22:13:44 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 22:13:44 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 22:13:43 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 22:13:43 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 22:13:43 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 22:13:43 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 22:13:43 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 22:13:43 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 22:13:43 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 22:13:43 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 21:20:00 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 21:20:00 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 21:20:00 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 21:20:00 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 20:34:37 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 20:34:37 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 20:34:37 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 20:34:37 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 20:34:37 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 20:34:37 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 20:34:37 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 20:34:37 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 20:34:37 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 20:34:37 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 20:34:37 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 20:34:37 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 20:34:37 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 20:34:37 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 20:34:37 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 20:34:37 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 19:28:27 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 19:28:27 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 19:28:27 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 19:28:27 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 19:28:22 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 19:28:22 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 19:28:22 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 19:28:22 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 19:28:22 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 19:28:22 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 19:28:22 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 19:28:22 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 19:28:22 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 19:28:22 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 19:28:22 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 19:28:22 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 19:02:31 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 19:02:31 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 19:02:31 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 19:02:31 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 18:01:44 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 18:01:44 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 18:01:44 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 18:01:44 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 18:01:44 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 18:01:44 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 18:01:44 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 18:01:44 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 18:01:43 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 18:01:43 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 18:01:43 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 18:01:43 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 17:54:12 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 17:54:12 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 17:54:11 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 17:54:11 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 16:30:22 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 16:30:22 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 16:30:22 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 16:30:22 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 16:30:17 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 16:30:17 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 16:30:17 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 16:30:17 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 16:30:17 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 16:30:17 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 16:30:17 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 16:30:17 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 16:30:17 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 16:30:17 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 16:30:17 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 16:30:17 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 16:13:46 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 16:13:46 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 16:13:46 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 16:13:46 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 16:13:41 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 16:13:41 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 16:13:41 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 16:13:41 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 16:13:41 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 16:13:41 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 16:13:41 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 16:13:41 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 16:13:41 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 16:13:41 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 16:13:41 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 16:13:41 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 15:56:57 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 15:56:57 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 15:56:56 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 15:56:56 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 15:23:09 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 15:23:09 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 15:23:09 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 15:23:09 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 15:23:09 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 15:23:09 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 15:23:09 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 15:23:09 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 15:23:09 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 15:23:09 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 15:23:09 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 15:23:09 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 15:23:09 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 15:23:09 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 15:23:09 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 15:23:09 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 15:09:34 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 15:09:34 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 15:09:33 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 15:09:33 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 14:56:06 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 14:56:06 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 14:56:06 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 14:56:06 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 14:56:06 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 14:56:06 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 14:56:06 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 14:56:06 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 14:56:06 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 14:56:06 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 14:56:06 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 14:56:06 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 14:08:45 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 14:08:45 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 14:08:45 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 14:08:45 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 14:08:45 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 14:08:45 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 14:08:45 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 14:08:45 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 14:08:45 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 14:08:45 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 14:08:45 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 14:08:45 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 13:46:37 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 13:46:37 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 13:46:37 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 13:46:37 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 13:23:48 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 13:23:48 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 13:23:48 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 13:23:48 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 13:23:48 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 13:23:48 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 13:23:48 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 13:23:48 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 13:23:48 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 13:23:48 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 13:23:48 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 13:23:48 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 13:23:48 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 13:23:48 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 13:23:48 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 13:23:48 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 12:35:04 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 12:35:04 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 12:35:04 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 12:35:04 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 12:35:04 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 12:35:04 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 12:35:04 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 12:35:04 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 12:35:04 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 12:35:04 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 12:35:04 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 12:35:04 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 12:35:04 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 12:35:04 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 12:35:04 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 12:35:04 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 12:15:45 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 12:15:45 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 12:15:45 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 12:15:45 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 11:42:14 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 11:42:14 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 11:42:14 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 11:42:14 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 11:42:10 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 11:42:10 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 11:42:10 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 11:42:10 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 11:42:09 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 11:42:09 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 11:42:09 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 11:42:09 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 11:42:09 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 11:42:09 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 11:42:09 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 11:42:09 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 10:58:58 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 10:58:58 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 10:58:58 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 10:58:58 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 10:58:57 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 10:58:57 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 10:58:57 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 10:58:57 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 10:58:57 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 10:58:57 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 10:58:57 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 10:58:57 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 10:58:57 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 10:58:57 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 10:58:57 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 10:58:57 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 10:40:20 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 10:40:20 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 10:40:20 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 10:40:20 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 10:15:42 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 10:15:42 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 10:15:42 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 10:15:42 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 10:15:41 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 10:15:41 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 10:15:41 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 10:15:41 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 10:15:41 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 10:15:41 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 10:15:41 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 10:15:41 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 10:15:41 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 10:15:41 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 10:15:41 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 10:15:41 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 08:05:14 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 08:05:14 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 08:05:13 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 08:05:13 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 07:54:37 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 07:54:37 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 07:54:37 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 07:54:37 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 07:54:37 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 07:54:37 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 07:54:37 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 07:54:37 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 07:54:37 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 07:54:37 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 07:54:37 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 07:54:37 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 07:54:37 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 07:54:37 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 07:54:37 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 07:54:37 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 06:38:42 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 06:38:42 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 06:38:41 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 06:38:41 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 06:09:51 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 06:09:51 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 06:09:51 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 06:09:51 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 06:09:51 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 06:09:51 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 06:09:51 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 06:09:51 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 06:09:51 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 06:09:51 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 06:09:51 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 06:09:51 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 06:09:51 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 06:09:51 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 06:09:51 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 06:09:51 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 05:37:54 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 05:37:54 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 05:37:54 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 05:37:54 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 05:37:54 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 05:37:54 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 05:37:54 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 05:37:54 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 05:37:54 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 05:37:54 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 05:37:54 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 05:37:54 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 05:03:10 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 05:03:10 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 05:03:10 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 05:03:10 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 01:40:05 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 01:40:05 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 01:40:05 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 01:40:05 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 01:40:05 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 01:40:05 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 01:40:05 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 01:40:05 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 01:40:05 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 01:40:05 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 01:40:05 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 01:40:05 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 01:40:05 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 01:40:05 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 01:40:05 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-05 01:40:05 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 23:40:18 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 23:40:18 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 23:40:18 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 23:40:18 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 23:40:18 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 23:40:18 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 23:40:18 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 23:40:18 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 23:24:59 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 23:24:59 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 23:24:59 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 23:24:59 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 23:24:59 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 23:24:59 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 23:24:59 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 23:24:59 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 23:07:38 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 23:07:38 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 23:07:38 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 23:07:38 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 23:07:38 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 23:07:38 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 23:07:38 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 23:07:38 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 22:26:28 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 22:26:28 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 22:26:27 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 22:26:27 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 22:08:18 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 22:08:18 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 22:08:18 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-04 22:08:18 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
Back to top