SCARD

Suspicious activity by IP address 38.100.28.213

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Mon, 06 Jul 2026 11:14:31 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 38.100.28.213

Description Count
ET INFO WinRM wsman Access - Possible Lateral Movement 236
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 236

Detailed activity by IP address 38.100.28.213

Timestamp Description Protocol Destination Port
2026-07-06 11:14:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:14:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:14:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:14:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:14:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:14:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:14:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:14:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:14:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:14:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:14:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:14:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:14:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:14:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 11:14:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 11:14:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:27:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:27:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:27:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:27:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:09:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:09:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:09:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:09:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:09:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:09:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:09:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:09:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:09:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:09:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:09:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:09:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:09:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:09:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:09:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:09:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:20:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:20:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:20:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:20:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:58:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:58:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:58:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:58:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:06:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:06:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:06:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:06:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:57:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:57:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:57:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:57:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:57:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:57:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:57:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:57:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:41:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:41:20 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:41:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:41:20 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:41:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:41:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:41:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:41:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:41:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:41:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:41:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:41:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:41:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:41:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:41:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:41:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:46:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:46:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:46:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:46:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:46:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:46:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:46:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:46:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:46:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:46:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:46:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:46:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:46:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:46:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:46:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:46:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:50:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:50:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:50:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:50:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:50:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:50:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:50:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:50:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:50:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:50:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:50:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:50:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:50:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:50:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:50:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:50:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:01:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:01:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:01:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:01:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:21:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:21:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:21:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:21:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:21:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:21:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:21:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:21:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:21:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:21:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:21:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:21:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:21:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:21:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:21:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:21:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:16:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:16:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:16:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:16:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:16:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:16:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:16:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:16:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:15:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:15:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:15:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:15:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:15:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:15:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:15:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:15:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:04:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:04:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:04:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:04:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:33:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:33:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:33:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:33:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:33:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:33:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:33:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:33:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:33:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:33:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:33:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:33:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:33:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:33:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:33:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:33:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:05:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:05:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:05:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:05:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:05:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:05:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:05:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:05:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:05:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:05:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:05:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:05:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:05:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:05:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:05:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:05:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:44:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:44:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:44:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:44:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:11:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:11:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:11:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:11:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:11:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:11:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:11:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:11:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:11:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:11:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:11:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:11:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:11:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:11:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:11:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:11:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:06:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:06:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:06:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:06:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:06:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:06:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:06:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:06:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:06:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:06:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:06:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:06:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:06:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:06:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:06:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:06:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:37:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:37:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:37:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:37:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:37:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:37:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:37:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:37:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:37:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:37:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:37:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:37:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:37:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:37:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:37:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:37:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:18:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:18:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:18:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:18:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:18:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:18:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:18:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:18:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:18:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:18:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:18:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:18:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:18:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:18:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:18:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:18:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:56:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:56:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:56:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:56:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:17:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:17:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:17:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:17:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:17:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:17:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:17:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:17:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:17:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:17:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:17:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:17:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:17:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:17:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:17:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:17:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:22:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:22:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:22:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:22:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:21:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:21:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:21:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:21:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:21:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:21:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:21:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:21:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:21:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:21:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:21:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:21:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:21:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:21:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:21:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:21:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:37:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:37:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:37:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:37:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:36:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:36:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:36:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:36:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:36:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:36:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:36:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:36:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:36:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:36:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:36:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:36:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:07:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:07:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:07:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:07:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:06:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:06:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:06:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:06:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:06:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:06:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:06:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:06:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:06:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:06:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:06:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:06:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:42:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:42:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:42:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:42:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:38:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:38:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:38:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:38:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:38:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:38:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:38:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:38:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:38:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:38:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:38:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:38:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:38:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:38:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 03:38:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 03:38:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:39:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:39:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:39:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:39:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:39:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:39:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:39:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:39:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:21:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:21:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:21:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:21:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:21:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:21:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:21:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:21:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:02:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:02:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:02:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:02:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:02:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:02:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:02:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:02:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:36:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:36:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:36:11 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:36:11 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:36:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:36:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:36:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:36:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:10:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:10:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:10:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:10:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:10:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:10:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:10:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:10:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 17:49:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 17:49:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 17:49:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 17:49:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 17:49:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 17:49:25 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 17:49:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 17:49:25 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:42:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:42:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:42:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:42:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:42:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:42:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:42:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:42:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:42:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:42:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:42:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:42:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:42:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:42:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:42:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:42:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:08:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:08:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:08:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:08:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:08:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:08:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:08:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:08:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:08:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:08:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:08:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:08:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:08:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:08:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:08:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:08:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:06:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:06:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:06:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:06:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:05:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:05:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:05:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:05:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:05:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:05:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:05:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:05:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:05:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:05:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:05:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:05:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:05:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:05:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 09:05:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 09:05:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:41:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:41:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:41:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:41:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:41:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:41:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:41:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:41:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:41:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:41:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:41:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:41:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:41:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:41:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:41:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:41:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 11:56:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 11:56:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 11:56:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 11:56:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 10:41:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 10:41:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 10:41:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 10:41:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 08:32:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 08:32:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 08:32:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 08:32:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 19:59:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 19:59:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 19:59:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 19:59:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 15:24:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-02 15:24:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 15:24:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-02 15:24:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985

 

Back to top