SCARD

Suspicious activity by IP address 222.74.219.131

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Mon, 06 Jul 2026 11:00:41 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 222.74.219.131

Description Count
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 211
ET INFO WinRM wsman Access - Possible Lateral Movement 211

Detailed activity by IP address 222.74.219.131

Timestamp Description Protocol Destination Port
2026-07-06 11:00:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:00:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:00:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:00:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:00:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:00:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:00:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:00:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:00:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:00:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:00:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:00:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:44:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:44:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:10:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:10:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:10:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:10:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:43:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:43:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:07:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:07:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:07:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:07:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:07:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:07:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:07:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:07:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:28:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:28:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:28:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:28:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:25:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:25:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:25:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:25:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:57:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:57:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:57:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:57:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:27:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:27:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:27:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:27:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:27:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:27:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:27:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:27:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:27:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:27:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:27:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:27:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:56:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:56:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:56:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:56:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:56:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:56:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:56:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:56:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:35:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:35:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:35:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:35:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:35:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:35:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:35:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:35:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:35:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:35:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:35:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:35:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:35:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:35:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:35:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:35:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:01:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:01:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:21:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:21:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:21:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:21:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:05:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:05:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:05:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:05:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:05:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:05:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:05:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:05:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:20:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:20:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:20:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:20:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:20:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:20:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:20:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:20:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:00:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:00:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:00:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:00:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:00:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:00:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:00:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:00:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:37:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:37:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:37:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:37:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:33:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:33:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:33:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:33:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:26:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:26:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 01:25:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:25:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 01:25:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 01:25:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:25:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 01:25:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:24:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:24:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:24:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:24:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:24:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:24:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:24:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:24:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:11:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:11:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:11:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:11:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:37:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:37:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:37:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:37:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:05:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:05:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:05:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:05:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:05:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:05:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:05:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:05:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:05:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:05:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:05:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:05:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:05:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:05:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:05:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:05:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:51:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:51:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:36:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:36:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:36:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:36:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:36:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:36:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:36:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:36:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:58:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:58:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:58:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:58:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:17:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:17:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:55:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:55:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:55:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:55:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:38:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:38:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:38:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:38:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:36:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:36:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:36:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:36:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:34:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:34:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:20:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:20:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:20:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:20:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:12:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:12:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:12:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:12:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:26:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:26:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:26:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:26:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:26:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:26:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:26:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:26:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:22:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:22:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:22:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:22:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:21:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:21:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:21:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:21:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:09:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:09:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:09:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:09:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:09:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:09:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:09:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:09:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:44:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:44:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:44:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:44:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:44:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:44:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:44:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:44:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:35:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:35:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:35:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:35:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:20:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:20:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:20:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:20:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:20:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:20:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:20:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:20:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:31:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:31:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:31:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:31:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:05:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:05:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:48:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:48:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:48:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:48:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:48:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:48:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:48:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:48:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:28:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:28:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:28:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:28:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:28:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:28:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:28:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:28:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:18:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:18:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:18:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:18:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:04:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:04:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:04:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:04:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:04:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:04:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:04:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:04:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:07:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:07:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:07:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:07:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:06:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:06:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:06:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:06:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:06:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:06:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:06:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:06:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:06:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:06:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:06:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:06:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:06:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:06:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:06:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:06:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:30:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:30:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:30:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:30:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:30:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:30:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:30:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:30:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:08:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:08:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:08:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:08:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:08:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:08:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:25:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:25:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:25:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:25:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:25:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:25:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:25:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:25:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:07:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:07:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:38:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:38:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:38:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:38:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:38:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:38:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:38:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:38:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:24:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:24:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:24:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:24:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:24:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:24:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:24:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:24:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:49:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:49:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:49:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:49:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:36:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:36:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:36:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:36:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:20:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:20:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:20:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:20:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:19:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:19:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:19:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:19:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:46:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:46:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:46:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:46:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:46:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:46:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:46:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:46:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:40:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:40:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:40:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:40:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:21:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:21:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:21:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:21:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:36:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:36:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:36:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:36:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:15:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:15:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:15:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:15:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:15:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:15:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:15:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:15:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:15:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:15:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:15:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:15:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:15:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:15:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:15:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:15:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:55:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:55:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:55:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:55:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:55:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:55:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:55:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:55:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 00:22:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 00:22:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 00:22:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 00:22:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:37:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:37:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:37:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:37:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:37:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:37:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:37:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:37:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:20:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:20:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:20:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:20:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:04:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:04:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:04:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:04:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:04:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:04:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:04:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:04:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:15:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:15:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:15:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:15:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:15:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:15:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:15:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:15:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985

 

Back to top