SCARD

Suspicious activity by IP address 20.38.44.70

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Mon, 06 Jul 2026 10:18:34 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 20.38.44.70

Description Count
ET INFO WinRM wsman Access - Possible Lateral Movement 232
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 232

Detailed activity by IP address 20.38.44.70

Timestamp Description Protocol Destination Port
2026-07-06 10:18:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:18:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:18:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:18:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:34:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:34:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:34:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:34:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:34:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:34:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:34:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:34:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:34:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:34:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:34:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:34:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:34:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:34:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:34:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:34:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:18:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:18:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:18:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:18:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:18:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:18:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:18:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:18:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:18:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:18:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:18:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:18:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:07:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:07:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:07:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:07:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:57:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:57:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:57:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:57:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:57:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:57:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:57:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:57:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:57:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:57:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:57:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:57:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:57:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:57:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:57:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:57:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:55:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:55:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:55:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:55:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:55:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:55:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:55:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:55:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:55:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:55:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:55:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:55:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:55:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:55:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:55:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:55:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:16:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:16:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:16:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:16:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:12:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:12:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:12:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:12:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:37:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:37:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:37:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:37:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:06:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:06:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:06:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:06:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:29:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:29:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:29:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:29:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:29:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:29:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:29:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:29:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:29:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:29:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:29:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:29:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:29:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:29:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:29:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:29:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:12:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:12:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:12:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:12:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:10:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:10:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:10:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:10:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:09:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:09:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:09:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:09:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:09:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:09:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:09:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:09:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:09:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:09:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:09:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:09:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:33:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:33:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:33:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:33:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:45:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:45:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:45:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:45:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:57:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:57:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:57:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:57:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:57:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:57:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:57:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:57:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:57:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:57:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:57:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:57:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:57:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:57:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:57:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:57:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:23:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:23:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:23:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:23:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:12:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:12:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:12:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:12:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:12:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:12:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:12:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:12:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:12:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:12:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:12:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:12:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:12:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:12:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:12:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:12:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:40:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:40:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:40:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:40:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:02:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:02:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:02:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:02:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:02:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:02:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:02:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:02:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:02:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:02:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:02:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:02:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:02:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:02:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:02:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:02:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:43:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:43:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:43:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:43:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:24:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:24:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:24:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:24:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:24:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:24:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:24:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:24:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:24:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:24:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:24:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:24:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:24:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:24:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:24:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:24:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:13:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:13:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:13:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:13:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:13:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:13:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:13:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:13:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:13:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:13:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:13:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:13:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:13:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:13:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:13:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:13:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:02:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:02:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:02:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:02:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:10:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:10:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:10:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:10:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:10:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:10:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:10:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:10:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:10:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:10:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:10:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:10:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:10:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:10:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:10:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:10:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:37:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:37:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:37:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:37:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:37:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:37:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:37:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:37:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:37:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:37:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:37:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:37:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:20:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:20:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:20:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:20:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:20:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:20:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:20:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:20:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:01:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:01:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:01:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:01:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:01:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:01:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:01:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:01:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:54:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:54:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:54:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:54:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 19:08:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 19:08:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 19:08:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 19:08:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:57:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:57:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:57:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:57:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:57:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:57:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:57:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:57:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:30:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:30:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:30:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:30:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:30:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:30:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:30:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:30:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:07:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:07:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:07:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:07:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:17:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:17:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:17:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:17:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:59:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:59:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:59:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:59:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:59:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:59:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:59:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:59:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:59:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:59:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:59:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:59:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:59:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:59:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:59:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:59:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:19:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:19:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:19:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:19:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:19:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:19:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:19:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:19:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:19:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:19:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:19:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:19:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:19:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:19:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:19:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:19:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:27:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:27:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:27:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:27:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:27:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:27:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:27:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:27:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:27:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:27:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:27:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:27:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:27:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:27:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:27:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:27:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:45:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:45:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:45:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:45:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:45:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:45:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:45:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:45:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:45:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:45:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:45:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:45:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:45:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:45:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:45:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:45:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:10:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:10:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:10:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:10:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:10:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:10:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:10:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:10:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:10:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:10:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:10:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:10:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:10:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:10:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:10:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:10:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 14:23:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 14:23:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 14:23:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 14:23:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 09:29:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 09:29:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 09:29:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 09:29:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 08:08:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 08:08:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 08:08:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 08:08:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 04:16:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 04:16:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 04:16:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 04:16:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 19:21:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 19:21:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 19:21:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 19:21:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 15:38:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 15:38:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 15:38:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 15:38:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 21:56:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 21:56:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 21:56:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 21:56:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 20:31:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 20:31:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 20:31:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 20:31:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 18:57:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 18:57:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 18:57:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 18:57:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 11:15:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 11:15:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 11:15:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 11:15:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 10:13:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 10:13:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 10:13:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 10:13:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 07:46:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 07:46:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 07:46:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 07:46:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 23:31:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 23:31:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 23:31:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 23:31:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 22:00:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 22:00:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 22:00:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 22:00:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 20:20:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 20:20:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 20:20:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 20:20:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 19:18:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 19:18:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 19:18:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 19:18:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 14:49:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 14:49:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 14:49:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 14:49:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 09:12:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 09:12:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 09:12:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 09:12:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 08:03:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 08:03:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 08:03:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 08:03:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 05:37:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 05:37:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 05:37:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 05:37:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 03:24:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 03:24:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 03:24:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 03:24:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985

 

Back to top