SCARD

Suspicious activity by IP address 36.92.14.109

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Mon, 06 Jul 2026 11:03:49 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 36.92.14.109

Description Count
ET INFO WinRM wsman Access - Possible Lateral Movement 290
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 290

Detailed activity by IP address 36.92.14.109

Timestamp Description Protocol Destination Port
2026-07-06 11:03:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:03:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:03:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:03:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:03:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:03:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:03:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:03:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:03:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:03:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:03:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:03:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:03:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:03:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:03:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:03:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:33:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:33:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:33:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:33:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:14:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:14:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:14:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:14:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:14:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:14:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:14:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:14:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:14:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:14:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:14:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:14:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:14:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:14:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:14:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:14:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:58:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:58:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:58:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:58:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:58:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:58:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:58:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:58:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:58:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:58:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:58:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:58:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:58:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:58:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:58:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:58:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:00:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:00:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:00:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:00:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:13:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:13:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:13:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:13:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:13:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:13:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:13:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:13:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:13:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:13:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:13:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:13:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:13:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:13:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:13:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:13:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:11:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:11:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:11:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:11:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:38:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:38:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:38:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:38:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:38:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:38:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:38:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:38:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:38:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:38:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:38:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:38:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:38:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:38:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:38:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:38:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:59:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:59:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:59:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:59:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:59:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:59:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:59:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:59:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:59:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:59:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:59:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:59:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:59:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:59:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:59:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:59:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:28:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:28:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:28:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:28:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:58:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:58:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:58:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:58:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:58:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:58:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:58:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:58:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:58:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:58:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:58:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:58:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:58:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:58:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:58:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:58:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:27:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:27:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:27:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:27:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:11:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:11:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:11:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:11:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:11:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:11:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:11:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:11:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:11:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:11:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:11:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:11:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:11:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:11:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:11:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:11:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:20:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:20:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:20:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:20:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:36:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:36:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:36:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:36:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:36:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:36:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:36:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:36:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:36:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:36:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:36:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:36:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:36:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:36:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:36:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:36:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:10:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:10:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:10:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:10:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:36:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:36:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:36:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:36:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:36:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:36:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:36:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:36:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:36:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:36:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:36:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:36:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:36:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:36:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:36:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:36:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:58:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:58:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:58:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:58:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:56:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:56:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:56:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:56:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:56:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:56:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:56:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:56:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:56:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:56:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:56:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:56:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:56:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:56:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:56:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:56:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:34:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:34:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:34:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:34:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:23:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:23:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:23:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:23:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:23:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:23:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:23:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:23:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:23:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:23:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:23:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:23:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:23:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:23:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:23:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:23:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:08:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:08:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:08:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:08:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:08:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:08:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:08:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:08:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:08:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:08:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:08:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:08:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:08:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:08:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:08:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:08:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:07:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:07:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:07:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:07:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:07:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:07:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:07:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:07:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:07:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:07:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:07:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:07:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:07:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:07:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:07:41 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:07:41 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:17:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:17:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:17:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:17:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:59:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:59:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:59:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:59:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:25:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:25:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:25:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:25:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:25:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:25:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:25:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:25:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:25:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:25:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:25:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:25:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:25:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:25:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:25:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:25:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:00:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:00:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:00:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:00:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:00:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:00:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:00:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:00:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:00:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:00:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:00:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:00:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:00:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:00:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:00:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:00:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:18:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:18:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:18:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:18:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:18:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:18:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:18:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:18:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:18:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:18:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:18:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:18:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:18:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:18:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:18:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:18:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:18:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:18:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:18:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:18:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:55:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:55:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:55:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:55:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:55:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:55:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:55:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:55:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:55:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:55:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:55:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:55:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:55:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:55:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:55:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:55:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:48:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:48:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:48:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:48:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:48:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:48:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:48:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:48:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:48:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:48:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:48:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:48:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:48:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:48:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:48:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:48:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:36:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:36:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:36:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:36:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:36:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:36:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:36:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:36:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:36:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:36:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:36:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:36:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:36:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:36:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:36:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:36:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:01:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:01:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:01:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:01:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:01:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:01:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:01:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:01:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:01:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:01:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:01:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:01:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:01:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:01:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:01:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:01:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:01:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:01:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:01:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:01:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:38:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:38:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:38:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:38:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:38:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:38:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:38:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:38:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:18:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:18:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:18:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:18:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:18:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:18:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:18:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:18:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:02:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:02:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:02:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:02:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:02:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:02:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:02:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:02:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:29:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:29:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:29:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:29:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:29:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:29:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:29:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:29:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:29:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:29:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:29:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:29:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:29:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:29:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:29:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:29:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:15:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 22:15:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:15:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 22:15:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:55:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:55:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:55:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:55:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:55:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:55:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:55:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:55:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:17:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:17:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:17:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:17:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:17:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:17:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:17:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:17:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 17:58:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 17:58:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 17:58:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 17:58:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 17:58:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 17:58:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 17:58:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 17:58:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:19:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:19:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:19:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:19:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:19:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:19:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:19:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:19:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:19:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:19:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:19:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:19:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:19:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:19:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:19:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:19:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:03:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:03:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:03:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:03:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:03:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:03:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:03:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:03:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:03:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:03:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:03:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:03:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:03:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:03:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:03:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:03:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:31:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:31:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:31:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:31:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:42:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:42:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:42:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:42:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:42:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:42:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:42:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:42:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985

 

Back to top