Below is a list of the last 500 suspicious interactions with this IP.
Last observed Sun, 20 Sep 2026 01:17:53 (Australia/Brisbane)
| Description | Count |
|---|---|
| ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | 314 |
| ET INFO WinRM wsman Access - Possible Lateral Movement | 312 |
| Timestamp | Description | Protocol | Destination Port |
|---|---|---|---|
| 2026-09-20 01:17:53 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 80 |
| 2026-09-20 01:17:53 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 80 |
| 2026-08-19 05:59:13 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 05:59:13 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 05:59:13 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 05:59:13 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 05:59:13 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 05:59:13 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 05:59:13 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 05:59:13 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 05:13:43 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 05:13:43 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 05:13:43 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 05:13:43 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 05:13:43 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 05:13:43 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 05:13:43 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 05:13:43 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 04:32:51 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 04:32:51 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 04:32:51 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 04:32:51 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 04:32:51 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 04:32:51 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 04:32:51 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 04:32:51 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 03:45:56 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 03:45:56 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 03:45:56 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 03:45:56 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 03:45:56 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 03:45:56 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 03:45:56 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 03:45:56 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 04:22:15 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 04:22:15 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 04:22:15 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 04:22:15 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 04:22:15 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 04:22:15 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 04:22:15 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 04:22:15 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 03:53:30 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 03:53:30 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 03:53:30 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 03:53:30 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 03:53:30 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 03:53:30 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 03:53:30 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 03:53:30 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 03:31:58 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 03:31:58 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 03:31:58 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 03:31:58 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 03:31:57 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 03:31:57 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 03:31:57 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 03:31:57 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 02:57:22 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 02:57:22 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 02:57:22 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 02:57:22 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 02:57:21 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 02:57:21 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 02:57:21 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 02:57:21 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-15 03:13:41 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-15 03:13:41 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-15 03:13:41 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-15 03:13:41 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-15 03:13:41 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-15 03:13:41 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-15 03:13:41 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-15 03:13:41 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-15 02:22:33 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-15 02:22:33 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-15 02:22:33 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-15 02:22:33 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-15 02:22:33 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-15 02:22:33 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-15 02:22:33 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-15 02:22:33 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-15 02:05:36 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-15 02:05:36 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-15 02:05:36 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-15 02:05:36 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-15 02:05:36 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-15 02:05:36 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-15 02:05:36 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-15 02:05:36 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 23:36:18 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 23:36:18 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 23:36:18 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 23:36:18 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 23:36:18 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 23:36:18 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 23:36:18 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 23:36:18 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 23:06:40 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 23:06:40 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 23:06:40 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 23:06:40 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 23:06:40 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 23:06:40 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 23:06:40 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 23:06:40 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 22:05:20 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 22:05:20 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 22:05:20 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 22:05:20 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 22:05:20 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 22:05:20 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 22:05:20 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 22:05:20 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 21:35:00 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 21:35:00 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 21:35:00 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 21:35:00 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 21:35:00 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 21:35:00 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 21:35:00 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 21:35:00 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 06:28:54 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 06:28:54 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 06:28:54 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 06:28:54 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 06:28:54 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 06:28:54 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 06:28:54 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 06:28:54 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 05:59:10 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 05:59:10 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 05:59:10 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 05:59:10 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 05:59:09 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 05:59:09 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 05:59:09 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 05:59:09 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 04:12:18 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 04:12:18 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 04:12:18 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 04:12:18 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 04:12:18 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 04:12:18 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 04:12:18 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 04:12:18 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 03:34:39 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 03:34:39 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 03:34:39 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 03:34:39 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 03:34:39 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 03:34:39 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 03:34:39 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 03:34:39 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-12 01:17:38 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-12 01:17:38 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-12 01:17:38 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-12 01:17:38 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-12 01:17:38 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-12 01:17:38 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-12 01:17:38 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-12 01:17:38 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 22:40:07 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 22:40:07 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 22:40:07 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 22:40:07 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 22:40:07 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 22:40:07 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 22:40:07 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 22:40:07 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 22:15:16 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 22:15:16 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 22:15:16 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 22:15:16 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 22:15:16 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 22:15:16 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 22:15:16 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 22:15:16 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 21:14:25 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 21:14:25 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 21:14:25 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 21:14:25 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 21:14:24 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 21:14:24 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 21:14:24 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 21:14:24 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 20:43:55 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 20:43:55 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 20:43:55 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 20:43:55 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 20:43:55 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 20:43:55 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 20:43:55 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 20:43:55 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 19:37:46 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 19:37:46 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 19:37:46 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 19:37:46 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 19:37:46 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 19:37:46 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 19:37:46 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 19:37:46 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 07:37:36 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 07:37:36 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 07:37:36 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 07:37:36 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 07:37:36 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 07:37:36 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 07:37:36 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 07:37:36 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 06:12:51 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 06:12:51 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 06:12:51 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 06:12:51 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 06:12:51 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 06:12:51 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 06:12:51 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 06:12:51 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 05:14:29 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 05:14:29 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 05:14:29 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 05:14:29 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 05:14:29 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 05:14:29 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 05:14:29 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 05:14:29 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 04:36:51 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 04:36:51 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 04:36:51 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 04:36:51 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 04:36:51 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 04:36:51 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 04:36:51 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 04:36:51 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 04:20:38 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 04:20:38 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 04:20:38 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 04:20:38 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 04:20:38 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 04:20:38 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 04:20:38 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 04:20:38 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 08:45:47 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 08:45:47 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 08:45:47 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 08:45:47 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 08:45:47 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 08:45:47 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 08:45:47 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 08:45:47 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 06:20:14 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 06:20:14 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 06:20:14 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 06:20:14 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 06:20:13 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 06:20:13 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 06:20:13 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 06:20:13 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 05:01:05 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 05:01:05 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 05:01:05 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 05:01:05 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 05:01:05 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 05:01:05 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 05:01:05 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 05:01:05 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 04:02:00 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 04:02:00 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 04:02:00 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 04:02:00 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 04:01:59 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 04:01:59 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 04:01:59 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 04:01:59 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 02:27:36 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 02:27:36 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 02:27:36 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 02:27:36 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 02:27:36 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 02:27:36 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 02:27:36 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 02:27:36 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 01:52:47 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 01:52:47 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 01:52:47 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 01:52:47 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 01:52:47 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 01:52:47 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 01:52:47 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-09 01:52:47 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 21:52:13 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 21:52:13 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 21:52:13 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 21:52:13 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 21:52:13 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 21:52:13 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 21:52:13 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 21:52:13 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 20:36:29 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 20:36:29 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 20:36:29 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 20:36:29 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 20:36:28 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 20:36:28 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 20:36:28 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 20:36:28 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 20:03:42 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 20:03:42 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 20:03:42 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 20:03:42 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 20:03:41 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 20:03:41 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 20:03:41 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 20:03:41 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 19:35:34 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 19:35:34 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 19:35:34 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 19:35:34 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 19:35:34 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 19:35:34 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 19:35:34 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 19:35:34 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 18:42:12 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 18:42:12 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 18:42:12 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 18:42:12 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 18:42:12 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 18:42:12 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 18:42:12 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 18:42:12 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 17:06:18 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 17:06:18 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 17:06:18 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 17:06:18 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 17:06:18 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 17:06:18 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 17:06:18 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 17:06:18 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 14:19:10 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 14:19:10 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 14:19:10 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 14:19:10 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 14:19:10 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 14:19:10 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 14:19:10 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 14:19:10 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 13:41:54 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 13:41:54 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 13:41:54 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 13:41:54 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 13:41:53 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 13:41:53 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 13:41:53 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 13:41:53 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 13:24:19 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 13:24:19 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 13:24:19 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 13:24:19 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 13:24:19 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 13:24:19 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 13:24:19 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 13:24:19 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:36:38 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:36:38 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:36:38 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:36:38 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:36:38 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:36:38 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:36:38 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:36:38 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:19:18 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:19:18 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:19:18 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:19:18 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:19:18 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:19:18 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:19:18 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:19:18 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 11:35:40 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 11:35:40 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 11:35:40 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 11:35:40 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 11:35:39 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 11:35:39 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 11:35:39 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 11:35:39 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 10:55:11 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 10:55:11 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 10:55:11 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 10:55:11 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 10:55:11 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 10:55:11 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 10:55:11 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 10:55:11 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 10:24:40 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 10:24:40 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 10:24:40 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 10:24:40 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 10:24:39 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 10:24:39 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 10:24:39 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 10:24:39 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:31:53 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:31:53 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:31:53 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:31:53 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:31:53 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:31:53 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:31:53 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:31:53 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:03:13 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:03:13 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:03:13 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:03:13 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:03:13 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:03:13 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:03:13 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:03:13 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:40:54 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:40:54 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:40:54 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:40:54 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:40:54 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:40:54 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:40:54 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:40:54 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 06:53:09 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 06:53:09 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 06:53:09 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 06:53:09 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 06:53:09 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 06:53:09 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 06:53:09 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 06:53:09 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 05:54:37 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 05:54:37 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 05:54:37 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 05:54:37 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 05:54:37 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 05:54:37 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 05:54:37 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 05:54:37 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 03:05:48 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 03:05:48 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 03:05:48 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 03:05:48 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 03:05:47 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 03:05:47 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 03:05:47 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 03:05:47 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-07 23:34:17 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-07 23:34:17 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-07 23:34:17 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-07 23:34:17 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-07 23:34:17 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-07 23:34:17 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-07 23:34:17 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-07 23:34:17 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-07 21:16:22 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-07 21:16:22 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-07 21:16:22 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-07 21:16:22 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-07 21:16:21 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-07 21:16:21 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-07 21:16:21 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-07 21:16:21 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-20 20:00:22 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-20 20:00:22 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-20 20:00:22 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-20 20:00:22 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 07:04:08 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 07:04:08 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 07:04:08 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 07:04:08 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 07:03:57 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 07:03:57 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 07:03:57 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 07:03:57 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 07:03:57 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 07:03:57 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 07:03:57 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 07:03:57 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 07:03:57 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 07:03:57 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 07:03:57 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 07:03:57 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 07:03:57 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 07:03:57 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 07:03:57 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 07:03:57 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:43:17 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:43:17 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:43:17 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:43:17 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:43:17 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:43:17 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:43:17 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:43:17 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:43:17 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:43:17 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
Back to top