SCARD

Suspicious activity by IP address 216.10.11.59

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Mon, 06 Jul 2026 16:36:51 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 216.10.11.59

Description Count
ET INFO WinRM wsman Access - Possible Lateral Movement 386
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 386

Detailed activity by IP address 216.10.11.59

Timestamp Description Protocol Destination Port
2026-07-06 16:36:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 16:36:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 16:36:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 16:36:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 16:36:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 16:36:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 16:36:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 16:36:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 16:36:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 16:36:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 16:36:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 16:36:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 16:36:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 16:36:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 16:36:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 16:36:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:55:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:55:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:55:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:55:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:51:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:51:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:51:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:51:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:05:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:05:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:05:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:05:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:02:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:02:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:02:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:02:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:02:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:02:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:02:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:02:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:02:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:02:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:02:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:02:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:02:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:02:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:02:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:02:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:04:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:04:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:04:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:04:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:48:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:48:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:48:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:48:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:31:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:31:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:31:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:31:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:31:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:31:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:31:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:31:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:31:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:31:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:31:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:31:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:31:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:31:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:31:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:31:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:54:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:54:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:54:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:54:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:54:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:54:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:54:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:54:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:54:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:54:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:54:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:54:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:54:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:54:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:54:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:54:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:06:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:06:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:06:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:06:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:06:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:06:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:06:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:06:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:06:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:06:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:06:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:06:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:06:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:06:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:06:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:06:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:49:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:49:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:49:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:49:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:15:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:15:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:15:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:15:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:10:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:10:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:10:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:10:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:10:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:10:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:10:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:10:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:10:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:10:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:10:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:10:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:10:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:10:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:10:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:10:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:25:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:25:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:25:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:25:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:15:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:15:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:15:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:15:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:15:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:15:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:15:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:15:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:15:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:15:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:15:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:15:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:50:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:50:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:50:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:50:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:50:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:50:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:50:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:50:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:22:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:22:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:22:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:22:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:49:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:49:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:49:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:49:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:49:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:49:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:49:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:49:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:45:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:45:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:45:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:45:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:53:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:53:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:53:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:53:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:53:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:53:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:53:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:53:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:53:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:53:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:53:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:53:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:53:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:53:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:53:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:53:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:38:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:38:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:38:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:38:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:26:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:26:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:26:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:26:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:26:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:26:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:26:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:26:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:26:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:26:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:26:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:26:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:26:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:26:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:26:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:26:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:54:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:54:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:54:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:54:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:54:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:54:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:54:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:54:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:54:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:54:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:54:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:54:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:54:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:54:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:54:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:54:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:05:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:05:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:05:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:05:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:05:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:05:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:05:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:05:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:05:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:05:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:05:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:05:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:05:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:05:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:05:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:05:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:07:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:07:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:07:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:07:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:07:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:07:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:07:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:07:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:07:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:07:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:07:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:07:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:07:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:07:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:07:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:07:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:00:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:00:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:00:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:00:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:20:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:20:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:20:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:20:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:20:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:20:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:20:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:20:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:20:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:20:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:20:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:20:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:20:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:20:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:20:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:20:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:20:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:20:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:20:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:20:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:12:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:12:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:12:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:12:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:12:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:12:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:12:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:12:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:12:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:12:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:12:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:12:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:12:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:12:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:12:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:12:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:18:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:18:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:18:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:18:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:18:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:18:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:18:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:18:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:18:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:18:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:18:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:18:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:18:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:18:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:18:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:18:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:09:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:09:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:09:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:09:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:56:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:56:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:56:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:56:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:56:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:56:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:56:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:56:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:56:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:56:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:56:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:56:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:56:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:56:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:56:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:56:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:13:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:13:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:13:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:13:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:13:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:13:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:13:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:13:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:13:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:13:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:13:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:13:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:13:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:13:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:13:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:13:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:00:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:00:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:00:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:00:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:55:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:55:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:55:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:55:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:55:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:55:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:55:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:55:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:55:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:55:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:55:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:55:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:55:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:55:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:55:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:55:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:07:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:07:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:07:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:07:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:43:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:43:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:43:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:43:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:25:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:25:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:25:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:25:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:25:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:25:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:25:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:25:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:25:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:25:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:25:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:25:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:25:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:25:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:25:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:25:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:09:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:09:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:09:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:09:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:07:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:07:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:07:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:07:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:07:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:07:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:07:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:07:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:07:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:07:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:07:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:07:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:49:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:49:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:49:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:49:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:49:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:49:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:49:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:49:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:49:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:49:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:49:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:49:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:49:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:49:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:49:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:49:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:08:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:08:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:08:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:08:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:08:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:08:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:08:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:08:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:08:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:08:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:08:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:08:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:04:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:04:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:04:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:04:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:04:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:04:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:04:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:04:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:04:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:04:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:04:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:04:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:04:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:04:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:04:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:04:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:51:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:51:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:51:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:51:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:29:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:29:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:29:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:29:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:13:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:13:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:13:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:13:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:13:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:13:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:13:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:13:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:13:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:13:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:13:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:13:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:13:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:13:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:13:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:13:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:16:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:16:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:16:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:16:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:16:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:16:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:16:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:16:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:16:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:16:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:16:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:16:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:16:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:16:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:16:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:16:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:27:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:27:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:27:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:27:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:45:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:45:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:45:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:45:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:45:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:45:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:45:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:45:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:45:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:45:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:45:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:45:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985

 

Back to top