SCARD

Suspicious activity by IP address 92.205.20.173

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Mon, 06 Jul 2026 17:32:13 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 92.205.20.173

Description Count
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 262
ET INFO WinRM wsman Access - Possible Lateral Movement 262

Detailed activity by IP address 92.205.20.173

Timestamp Description Protocol Destination Port
2026-07-06 17:32:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 17:32:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 17:32:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 17:32:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 16:31:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 16:31:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 16:31:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 16:31:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 16:31:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 16:31:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 16:31:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 16:31:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 16:31:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 16:31:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 16:31:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 16:31:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:58:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:58:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:58:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:58:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:43:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:43:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:43:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:43:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:43:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:43:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:43:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:43:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:43:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:43:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:43:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:43:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:43:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:43:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:43:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:43:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:48:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:48:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:48:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:48:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:16:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 09:16:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:16:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 09:16:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:40:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:40:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:40:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:40:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:15:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:15:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:15:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:15:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:15:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:15:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:15:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:15:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:15:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:15:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:15:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:15:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:42:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:42:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:42:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:42:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:42:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:42:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:42:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:42:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:42:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:42:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:42:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:42:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:42:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:42:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:42:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:42:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:20:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:20:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:20:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:20:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:20:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:20:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:20:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:20:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:20:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:20:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:20:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:20:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:20:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:20:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:20:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:20:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:37:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:37:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:37:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:37:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:09:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:09:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:09:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:09:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:53:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:53:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:53:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:53:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:53:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:53:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:53:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:53:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:53:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:53:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:53:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:53:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:53:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:53:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:53:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:53:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:09:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:09:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:09:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:09:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:09:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:09:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:09:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:09:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:09:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 04:09:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:09:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 04:09:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:24:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:24:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:24:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:24:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:36:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:36:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:36:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:36:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:23:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:23:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:23:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:23:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:23:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:23:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:23:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:23:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:23:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:23:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:23:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:23:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:56:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:56:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 01:56:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 01:56:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:56:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 01:56:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 01:56:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:56:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:56:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 01:56:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 01:56:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:56:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:56:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:56:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 01:56:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 01:56:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:23:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:23:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:23:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:23:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:54:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:54:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:54:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:54:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:54:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:54:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:54:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:54:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:54:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:54:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:54:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:54:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:54:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:54:09 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:54:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:54:09 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:36:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:36:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:36:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:36:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:22:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:22:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:22:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:22:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:35:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:35:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:35:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:35:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:35:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:35:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:35:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:35:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:35:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:35:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:35:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:35:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:19:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:19:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:19:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:19:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:17:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:17:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 14:17:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 14:17:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:56:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:56:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:56:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:56:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:18:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:18:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:18:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:18:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:18:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:18:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:18:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:18:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:18:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:18:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:18:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:18:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:55:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:55:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:55:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:55:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:55:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:55:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:55:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:55:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:55:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:55:51 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:55:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:55:51 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:22:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:22:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:22:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:22:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:32:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:32:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:32:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:32:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:11:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:11:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:11:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:11:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:11:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:11:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:11:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:11:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:34:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:34:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:34:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:34:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:31:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:31:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:31:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:31:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:31:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:31:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:31:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:31:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:31:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:31:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:31:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:31:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:10:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:10:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:10:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:10:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:10:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 10:10:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:10:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 10:10:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:05:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:05:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:05:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:05:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:13:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:13:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:13:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:13:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:02:08 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:02:08 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 08:02:07 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 08:02:07 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:53:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:53:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:53:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:53:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:12:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:12:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:12:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:12:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:12:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:12:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:12:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:12:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:12:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:12:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:12:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:12:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:52:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:52:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:52:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:52:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:52:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:52:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:52:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:52:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:52:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:52:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:52:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:52:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:27:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:27:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:27:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:27:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:26:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:26:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:26:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:26:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:26:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:26:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:26:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:26:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:26:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:26:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:26:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:26:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:10:01 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 05:10:01 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:10:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 05:10:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:52:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:52:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:52:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:52:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:52:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:52:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:52:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:52:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:52:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:52:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:52:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:52:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:52:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:52:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:52:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:52:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:36:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:36:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:36:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:36:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:36:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:36:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:36:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:36:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:36:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:36:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:36:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:36:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:36:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:36:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 04:36:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 04:36:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:50:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 02:50:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:50:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 02:50:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:49:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:49:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:49:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:49:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:49:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:49:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:49:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:49:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:40:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:40:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 01:40:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 01:40:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:37:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:37:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:37:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:37:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:37:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:37:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:37:06 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:37:06 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:19:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:19:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:19:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:19:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:19:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:19:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:19:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:19:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:00:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:00:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:00:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:00:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:00:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 23:00:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:00:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 23:00:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 19:56:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 19:56:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 19:56:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 19:56:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 19:16:45 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 19:16:45 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 19:16:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 19:16:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:55:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:55:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:55:59 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:55:59 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:37:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:37:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:37:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:37:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:37:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:37:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:37:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:37:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:15:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:15:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 18:15:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 18:15:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 17:51:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 17:51:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 17:51:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 17:51:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 17:51:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 17:51:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 17:51:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 17:51:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:24:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:24:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:24:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:24:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:24:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:24:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:24:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:24:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:24:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:24:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:24:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:24:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:24:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:24:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 11:24:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 11:24:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:38:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 10:38:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:38:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 10:38:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:34:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:34:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 08:34:10 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 08:34:10 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:26:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:26:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 07:26:48 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 07:26:48 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:25:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:25:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:25:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:25:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:25:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:25:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 06:25:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 06:25:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 04:56:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 04:56:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 04:56:55 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 04:56:55 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 00:56:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 00:56:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-04 00:56:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-04 00:56:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 20:04:28 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 20:04:28 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 20:04:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 20:04:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 14:47:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 14:47:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 14:47:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 14:47:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 13:30:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 13:30:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-03 13:30:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-03 13:30:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985

 

Back to top