Below is a list of the last 500 suspicious interactions with this IP.
Last observed Wed, 19 Aug 2026 06:31:48 (Australia/Brisbane)
| Description | Count |
|---|---|
| ET INFO WinRM wsman Access - Possible Lateral Movement | 260 |
| ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | 260 |
| Timestamp | Description | Protocol | Destination Port |
|---|---|---|---|
| 2026-08-19 06:31:48 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 06:31:48 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 06:31:48 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 06:31:48 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 06:31:48 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 06:31:48 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 06:31:48 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 06:31:48 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 05:56:15 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 05:56:15 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 05:56:15 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 05:56:15 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 05:56:15 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 05:56:15 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 05:56:15 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 05:56:15 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 05:17:45 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 05:17:45 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 05:17:45 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 05:17:45 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 05:17:45 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 05:17:45 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 05:17:45 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 05:17:45 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 04:40:58 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 04:40:58 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 04:40:58 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 04:40:58 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 04:40:58 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 04:40:58 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 04:40:58 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 04:40:58 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 03:52:52 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 03:52:52 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 03:52:52 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 03:52:52 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 03:52:52 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 03:52:52 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 03:52:52 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-19 03:52:52 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 05:29:31 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 05:29:31 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 05:29:30 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 05:29:30 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 04:41:40 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 04:41:40 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 04:41:40 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 04:41:40 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 04:28:04 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 04:28:04 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 04:28:04 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 04:28:04 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 03:57:05 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 03:57:05 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 03:57:05 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 03:57:05 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 03:57:05 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 03:57:05 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 03:57:05 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 03:57:05 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 03:40:12 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 03:40:12 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 03:40:12 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 03:40:12 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 03:23:08 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 03:23:08 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 03:23:08 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 03:23:08 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 03:23:08 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 03:23:08 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 03:23:08 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 03:23:08 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 02:59:42 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 02:59:42 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 02:59:42 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 02:59:42 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 02:59:42 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 02:59:42 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 02:59:42 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-17 02:59:42 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-16 23:30:13 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-16 23:30:13 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-16 23:30:13 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-16 23:30:13 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-16 23:30:13 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-16 23:30:13 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-16 23:30:13 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-16 23:30:13 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-15 02:15:31 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-15 02:15:31 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-15 02:15:31 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-15 02:15:31 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-15 02:15:31 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-15 02:15:31 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-15 02:15:31 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-15 02:15:31 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 21:21:33 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 21:21:33 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 21:21:33 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 21:21:33 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 21:21:33 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 21:21:33 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 21:21:33 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 21:21:33 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 06:29:16 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 06:29:16 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 06:29:16 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 06:29:16 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 06:29:16 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 06:29:16 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 06:29:16 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 06:29:16 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 03:26:14 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 03:26:14 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 03:26:14 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 03:26:14 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 03:26:14 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 03:26:14 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 03:26:14 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-14 03:26:14 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-12 00:51:13 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-12 00:51:13 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-12 00:51:13 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-12 00:51:13 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-12 00:51:13 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-12 00:51:13 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-12 00:51:13 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-12 00:51:13 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 23:08:17 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 23:08:17 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 23:08:17 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 23:08:17 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 23:08:17 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 23:08:17 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 23:08:17 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 23:08:17 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 22:45:35 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 22:45:35 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 22:45:35 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 22:45:35 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 22:45:35 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 22:45:35 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 22:45:35 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 22:45:35 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 20:57:42 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 20:57:42 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 20:57:42 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 20:57:42 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 20:57:42 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 20:57:42 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 20:57:42 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 20:57:42 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 19:30:30 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 19:30:30 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 19:30:30 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 19:30:30 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 19:30:29 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 19:30:29 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 19:30:29 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 19:30:29 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 18:20:13 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 18:20:13 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 18:20:13 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 18:20:13 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 18:20:12 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 18:20:12 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 18:20:12 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 18:20:12 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 08:31:37 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 08:31:37 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 08:31:37 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 08:31:37 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 08:31:37 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 08:31:37 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 08:31:37 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 08:31:37 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 07:14:48 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 07:14:48 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 07:14:48 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 07:14:48 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 07:14:47 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 07:14:47 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 07:14:47 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 07:14:47 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 05:31:05 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 05:31:05 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 05:31:05 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 05:31:05 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 05:31:05 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 05:31:05 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 05:31:05 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 05:31:05 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 04:26:21 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 04:26:21 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 04:26:21 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 04:26:21 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 04:26:21 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 04:26:21 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 04:26:21 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-11 04:26:21 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 21:32:50 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 21:32:50 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 21:32:50 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 21:32:50 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 21:32:50 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 21:32:50 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 21:32:50 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 21:32:50 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 19:01:57 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 19:01:57 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 19:01:57 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 19:01:57 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 19:01:57 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 19:01:57 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 19:01:57 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 19:01:57 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 17:04:39 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 17:04:39 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 17:04:39 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 17:04:39 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 17:04:39 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 17:04:39 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 17:04:39 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 17:04:39 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 15:41:09 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 15:41:09 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 15:41:09 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 15:41:09 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 15:41:09 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 15:41:09 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 15:41:09 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 15:41:09 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 15:14:01 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 15:14:01 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 15:14:01 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 15:14:01 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 15:14:01 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 15:14:01 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 15:14:01 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 15:14:01 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 14:12:25 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 14:12:25 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 14:12:25 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 14:12:25 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 14:12:25 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 14:12:25 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 14:12:25 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 14:12:25 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:20:30 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:20:30 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:20:30 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:20:30 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:20:30 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:20:30 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:20:30 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 12:20:30 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 11:46:00 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 11:46:00 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 11:46:00 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 11:46:00 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 11:46:00 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 11:46:00 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 11:46:00 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 11:46:00 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 11:12:49 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 11:12:49 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 11:12:49 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 11:12:49 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 11:12:49 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 11:12:49 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 11:12:49 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 11:12:49 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:35:18 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:35:18 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:35:18 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:35:18 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:35:18 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:35:18 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:35:18 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:35:18 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:07:44 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:07:44 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:07:44 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:07:44 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:07:44 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:07:44 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:07:44 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 08:07:44 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:25:50 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:25:50 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:25:50 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:25:50 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:25:50 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:25:50 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:25:50 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:25:50 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:02:22 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:02:22 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:02:22 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:02:22 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:02:22 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:02:22 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:02:22 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 07:02:22 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 04:06:59 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 04:06:59 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 04:06:59 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 04:06:59 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 04:06:59 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 04:06:59 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 04:06:59 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 04:06:59 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 03:05:01 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 03:05:01 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 03:05:01 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 03:05:01 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 03:05:00 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 03:05:00 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 03:05:00 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 03:05:00 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 01:31:41 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 01:31:41 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 01:31:41 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 01:31:41 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 01:31:41 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 01:31:41 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 01:31:41 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-08 01:31:41 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-07 23:52:42 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-07 23:52:42 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-07 23:52:42 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-07 23:52:42 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-07 23:52:42 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-07 23:52:42 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-07 23:52:42 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-07 23:52:42 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-07 21:56:06 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-07 21:56:06 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-07 21:56:06 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-07 21:56:06 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-07 21:56:06 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-07 21:56:06 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-08-07 21:56:06 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-08-07 21:56:06 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-20 19:47:50 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-20 19:47:50 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-20 19:47:50 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-20 19:47:50 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-20 09:02:21 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-20 09:02:21 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-20 09:02:20 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-20 09:02:20 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-20 02:01:37 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-20 02:01:37 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-20 02:01:37 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-20 02:01:37 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:34:29 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:34:29 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:34:29 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:34:29 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:34:29 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:34:29 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:34:29 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:34:29 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:34:29 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:34:29 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:34:29 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:34:29 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:34:29 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:34:29 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:34:29 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 06:34:29 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 05:38:19 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 05:38:19 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 05:38:19 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 05:38:19 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 05:38:19 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 05:38:19 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 05:38:19 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 05:38:19 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 05:38:19 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 05:38:19 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 05:38:19 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 05:38:19 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 05:38:19 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 05:38:19 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 05:38:19 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 05:38:19 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:58:42 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:58:42 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:58:42 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:58:42 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:09:36 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:09:36 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:09:36 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:09:36 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:09:36 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:09:36 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:09:36 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:09:36 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:09:36 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:09:36 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:09:36 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:09:36 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:09:36 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:09:36 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:09:36 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 04:09:36 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 03:45:42 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 03:45:42 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 03:45:41 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 03:45:41 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 02:51:38 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 02:51:38 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 02:51:38 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 02:51:38 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 02:51:38 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 02:51:38 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 02:51:38 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 02:51:38 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 02:51:37 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 02:51:37 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 02:51:37 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 02:51:37 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 02:51:37 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 02:51:37 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 02:51:37 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 02:51:37 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 02:14:03 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 02:14:03 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 02:14:03 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 02:14:03 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 01:47:55 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 01:47:55 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 01:47:55 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 01:47:55 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 01:47:55 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 01:47:55 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 01:47:55 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 01:47:55 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 01:47:55 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 01:47:55 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 01:47:55 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 01:47:55 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 01:47:55 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 01:47:55 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 01:47:55 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 01:47:55 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 01:12:02 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 01:12:02 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 01:12:02 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 01:12:02 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 01:12:02 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 01:12:02 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 01:12:02 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 01:12:02 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 01:12:02 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 01:12:02 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 01:12:02 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 01:12:02 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 01:12:01 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 01:12:01 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 01:12:01 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 01:12:01 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 00:43:47 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 00:43:47 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 00:43:47 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 00:43:47 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 00:24:01 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 00:24:01 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 00:24:01 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 00:24:01 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 00:24:01 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 00:24:01 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 00:24:01 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 00:24:01 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 00:24:01 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 00:24:01 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 00:24:01 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 00:24:01 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 00:24:01 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 00:24:01 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 00:24:01 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-17 00:24:01 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-16 23:24:04 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-16 23:24:04 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-16 23:24:04 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-16 23:24:04 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-16 23:24:04 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-16 23:24:04 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-16 23:24:04 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-16 23:24:04 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-16 23:24:04 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-16 23:24:04 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-16 23:24:04 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-16 23:24:04 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-16 23:24:04 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-16 23:24:04 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
| 2026-07-16 23:24:04 | ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement | TCP | 5985 |
| 2026-07-16 23:24:04 | ET INFO WinRM wsman Access - Possible Lateral Movement | TCP | 5985 |
Back to top