SCARD

Suspicious activity by IP address 20.77.33.82

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Wed, 19 Aug 2026 19:38:32 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 20.77.33.82

Description Count
ET INFO WinRM wsman Access - Possible Lateral Movement 250
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 250

Detailed activity by IP address 20.77.33.82

Timestamp Description Protocol Destination Port
2026-08-19 19:38:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 19:38:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 19:38:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 19:38:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 03:49:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 03:49:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 03:49:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 03:49:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 03:49:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-19 03:49:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 03:49:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-19 03:49:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:31:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:31:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:31:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:31:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:31:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:31:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:31:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:31:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:14:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:14:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:14:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:14:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:14:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 04:14:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:14:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 04:14:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:55:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:55:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:55:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:55:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:55:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:55:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:55:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:55:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:33:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:33:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:33:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:33:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:33:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:33:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:33:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:33:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:16:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:16:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:16:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:16:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:16:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:16:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 03:16:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 03:16:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:56:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:56:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:56:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:56:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:56:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:56:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-17 02:56:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-17 02:56:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-16 23:14:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-16 23:14:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-16 23:14:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-16 23:14:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-16 23:14:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-16 23:14:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-16 23:14:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-16 23:14:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:51:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 03:51:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:51:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 03:51:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:51:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-15 02:51:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:51:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-15 02:51:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:03:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:03:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:03:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:03:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:03:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:03:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 21:03:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 21:03:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:13:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:13:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:13:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:13:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:13:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:13:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 07:13:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 07:13:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:45:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:45:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:45:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:45:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:45:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:45:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:45:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:45:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:26:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:26:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:26:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:26:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:26:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:26:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 05:26:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 05:26:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:53:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:53:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:53:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:53:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:53:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-14 03:53:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:53:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-14 03:53:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:06:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:06:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:06:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:06:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-12 00:06:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:06:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:06:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-12 00:06:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:28:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:28:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:28:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:28:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:28:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:28:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:28:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:28:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:06:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:06:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:06:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:06:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 22:06:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:06:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:06:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 22:06:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:47:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:47:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:47:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:47:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:47:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:47:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-11 20:47:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-11 20:47:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:01:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:01:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:01:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:01:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:01:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:01:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 07:01:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 07:01:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:42:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:42:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:42:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:42:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:42:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:42:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 06:42:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 06:42:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:19:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:19:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:19:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:19:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:19:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 05:19:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:19:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 05:19:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:19:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:19:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:19:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:19:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:19:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:19:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-09 02:19:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-09 02:19:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:44:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:44:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:44:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:44:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:44:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:44:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 21:44:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 21:44:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:42:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:42:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:42:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:42:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:42:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:42:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 16:42:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 16:42:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:03:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:03:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:03:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:03:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:03:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:03:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 15:03:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 15:03:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:43:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:43:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:43:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:43:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:43:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:43:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:43:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:43:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:07:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:07:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:07:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:07:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:07:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:07:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 13:07:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 13:07:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:16:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:16:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:16:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:16:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 12:16:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:16:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:16:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 12:16:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:57:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:57:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:57:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:57:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:57:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:57:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 11:57:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 11:57:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:13:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:13:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:13:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:13:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:13:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 07:13:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:13:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 07:13:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:42:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:42:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:42:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:42:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:42:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 05:42:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:42:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 05:42:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 03:21:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 03:21:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:21:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:21:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 03:21:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 03:21:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 03:21:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 03:21:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 01:31:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 01:31:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 01:31:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 01:31:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 01:31:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-08 01:31:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 01:31:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-08 01:31:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:17:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:17:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:17:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:17:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:17:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-08-07 22:17:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:17:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-08-07 22:17:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 21:16:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 21:16:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 21:16:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 21:16:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 09:38:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 09:38:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 09:38:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 09:38:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 01:02:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 01:02:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-20 01:02:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-20 01:02:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 08:17:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 08:17:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 08:17:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 08:17:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:16:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:16:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:16:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:16:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:16:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:16:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:16:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:16:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:16:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:16:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 07:16:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 07:16:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:44:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:44:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:44:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:44:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:44:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:44:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:44:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:44:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:44:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:44:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:44:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:44:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:44:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:44:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:44:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:44:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:06:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 06:06:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:06:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 06:06:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:57:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:57:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 04:57:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 04:57:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:04:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:04:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 03:04:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 03:04:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:11:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:11:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:11:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:11:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:11:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:11:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:11:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:11:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:11:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:11:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:11:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:11:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:11:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:11:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 02:11:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 02:11:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:25:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-17 01:25:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:25:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-17 01:25:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:56:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:56:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 23:56:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 23:56:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:03:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:03:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:03:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:03:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:03:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:03:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:03:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:03:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:03:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:03:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:03:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:03:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:03:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:03:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 22:03:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 22:03:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:58:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-16 21:58:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:58:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-16 21:58:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:34:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:34:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:34:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:34:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:32:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:32:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:32:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:32:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:32:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:32:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:32:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:32:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:33:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:33:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:33:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:33:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:33:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:33:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:33:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:33:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:33:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:33:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:33:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:33:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:38:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:38:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:38:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:38:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:38:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:38:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:38:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:38:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:54:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:54:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:54:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:54:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:54:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:54:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:54:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:54:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:54:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:54:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:54:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:54:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:54:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:54:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:54:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:54:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:18:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:18:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:18:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:18:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:18:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:18:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:18:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:18:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:18:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:18:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:18:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:18:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:18:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:18:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:18:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:18:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:59:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:59:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:59:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:59:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:59:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:59:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:59:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:59:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:59:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:59:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:59:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:59:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:59:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:59:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:59:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:59:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 19:44:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 19:44:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 19:44:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 19:44:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 12:31:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 12:31:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 12:31:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 12:31:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 09:09:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 09:09:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 09:09:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 09:09:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 07:27:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 07:27:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 07:27:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 07:27:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 22:03:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 22:03:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 22:03:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 22:03:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 18:51:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 18:51:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 18:51:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 18:51:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 13:48:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 13:48:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 13:48:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 13:48:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 11:56:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 11:56:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-30 11:56:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-30 11:56:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 13:42:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 13:42:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 13:42:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 13:42:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 07:12:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 07:12:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 07:12:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 07:12:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 06:04:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-06-29 06:04:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 06:04:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-06-29 06:04:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985

 

Back to top