SCARD

Suspicious activity by IP address 219.109.219.42

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Mon, 06 Jul 2026 11:01:35 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 219.109.219.42

Description Count
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 376
ET INFO WinRM wsman Access - Possible Lateral Movement 376

Detailed activity by IP address 219.109.219.42

Timestamp Description Protocol Destination Port
2026-07-06 11:01:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:01:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:01:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:01:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:01:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:01:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:01:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:01:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:01:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:01:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:01:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:01:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:01:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:01:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:01:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:01:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:43:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:43:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:43:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:43:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:43:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:43:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:43:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:43:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:43:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:43:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:43:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:43:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:43:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:43:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:43:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:43:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:06:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:06:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:06:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:06:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:37:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:37:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:13:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:13:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:13:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:13:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:13:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:13:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:13:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:13:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:13:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:13:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:13:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:13:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:13:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:13:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:13:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:13:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:55:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:55:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:55:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:55:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:55:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:55:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:55:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:55:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:55:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:55:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:55:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:55:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:55:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:55:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:55:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:55:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:37:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:37:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:24:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:24:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:24:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:24:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:24:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:24:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:24:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:24:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:24:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:24:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:24:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:24:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:24:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:24:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:24:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:24:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:55:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:55:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:55:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:55:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:55:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:55:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:55:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:55:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:55:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:55:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:55:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:55:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:55:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:55:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:55:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:55:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:30:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:30:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:30:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:30:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:24:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:24:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:24:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:24:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:55:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:55:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:55:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:55:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:51:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:51:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:51:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:51:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:18:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:18:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:18:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:18:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:18:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:18:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:18:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:18:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:18:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:18:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:18:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:18:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:18:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:18:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:18:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:18:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:50:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:50:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:50:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:50:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:50:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:50:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:50:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:50:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:50:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:50:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:50:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:50:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:18:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:18:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:18:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:18:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:17:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:17:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:17:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:17:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:17:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:17:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:17:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:17:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:17:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:17:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:17:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:17:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:59:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:59:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:59:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:59:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:44:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:44:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:44:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:44:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:44:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:44:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:44:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:44:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:44:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:44:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:44:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:44:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:44:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:44:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:44:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:44:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:59:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:59:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:59:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:59:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:59:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:59:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:59:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:59:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:59:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:59:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:59:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:59:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:36:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:36:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:36:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:36:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:36:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:36:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:36:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:36:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:36:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:36:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:36:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:36:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:36:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:36:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:36:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:36:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:22:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:22:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:22:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:22:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:45:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:45:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:45:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:45:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:26:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:26:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:26:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:26:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:26:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:26:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:26:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:26:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:26:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:26:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:26:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:26:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:26:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:26:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:26:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:26:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:55:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:55:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:55:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:55:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:44:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:44:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:44:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:44:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:44:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:44:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:44:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:44:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:44:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:44:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:44:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:44:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:16:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:16:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:16:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:16:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:16:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:16:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:16:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:16:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:16:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:16:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:16:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:16:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:16:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:16:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:16:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:16:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:33:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:33:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:33:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:33:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:33:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:33:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:33:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:33:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:33:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:33:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:33:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:33:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:33:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:33:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:33:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:33:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:22:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:22:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:22:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:22:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:21:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:21:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:21:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:21:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:21:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:21:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:21:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:21:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:21:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:21:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:21:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:21:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:48:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:48:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:48:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:48:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:48:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:48:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:48:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:48:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:48:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:48:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:48:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:48:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:48:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:48:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:48:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:48:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:45:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:45:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:45:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:45:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:42:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:42:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:42:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:42:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:41:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:41:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:41:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:41:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:40:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:40:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:40:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:40:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:40:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:40:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:40:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:40:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:40:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:40:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:40:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:40:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:36:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:36:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:36:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:36:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:48:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:48:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:48:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:48:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:48:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:48:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:48:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:48:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:48:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:48:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:48:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:48:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:48:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:48:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:48:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:48:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:28:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:28:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:28:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:28:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:41:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:41:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:41:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:41:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:42:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:42:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:42:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:42:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:41:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:41:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:41:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:41:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:40:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:40:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:40:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:40:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:40:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:40:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:40:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:40:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:00:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:00:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:00:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:00:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:00:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:00:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:00:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:00:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:00:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:00:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:00:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:00:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:00:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:00:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:00:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:00:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:18:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:18:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:18:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:18:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:18:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:18:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:18:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:18:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:18:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:18:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:18:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:18:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:18:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:18:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:18:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:18:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:17:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:17:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:16:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:16:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:21:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:21:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:21:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:21:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:20:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:20:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:20:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:20:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:20:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:20:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:20:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:20:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:20:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:20:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:20:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:20:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:29:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:29:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:29:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:29:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:08:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:08:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:08:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:08:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:08:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:08:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:08:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:08:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:08:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:08:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:08:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:08:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:08:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:08:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:08:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:08:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:47:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:47:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:47:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:47:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:28:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:28:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:28:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:28:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:28:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:28:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:28:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:28:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:28:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:28:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:28:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:28:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:47:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:47:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:47:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:47:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:47:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:47:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:47:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:47:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:47:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:47:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:47:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:47:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:40:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:40:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:40:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:40:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:13:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:13:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:13:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:13:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:07:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:07:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:07:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:07:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:07:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:07:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:07:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:07:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985

 

Back to top