09/10/2021 02:55:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2135932
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2135931
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2135930
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2135929
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2135928
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2135927
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2135926
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2135925
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2135924
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2135923
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2135942
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2135941
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2135940
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2135939
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2135938
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2135937
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2135936
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2135935
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2135934
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2135933
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2135952
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2135951
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2135950
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2135949
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2135948
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2135947
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2135946
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2135945
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2135944
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2135943
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2135962
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2135961
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2135960
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2135959
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2135958
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2135957
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2135956
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2135955
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2135954
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2135953
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2135972
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2135971
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2135970
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2135969
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2135968
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2135967
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2135966
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2135965
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2135964
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2135963
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2135982
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2135981
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2135980
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2135979
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2135978
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2135977
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2135976
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2135975
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2135974
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2135973
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2135992
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2135991
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2135990
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2135989
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2135988
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2135987
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2135986
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2135985
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2135984
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2135983
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136002
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136001
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136000
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2135999
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2135998
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2135997
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2135996
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2135995
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2135994
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2135993
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136012
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136011
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136010
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136009
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136008
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136007
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136006
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136005
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136004
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136003
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136022
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136021
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136020
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136019
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136018
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136017
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136016
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136015
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136014
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136013
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:56 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136032
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:56 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136031
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:56 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136030
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:56 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136029
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:56 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136028
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:56 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136027
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:56 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136026
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:56 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136025
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:56 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136024
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:55:56 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136023
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136042
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136041
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136040
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136039
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136038
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136037
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136036
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136035
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136034
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136033
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136052
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136051
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136050
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136049
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136048
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136047
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136046
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136045
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136044
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136043
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136062
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136061
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136060
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136059
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136058
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136057
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136056
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136055
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136054
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136053
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:16 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136072
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:16 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136071
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:16 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136070
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:16 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136069
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:16 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136068
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:16 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136067
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:16 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136066
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:16 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136065
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:16 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136064
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:16 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136063
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136082
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136081
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136080
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136079
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136078
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136077
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136076
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136075
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136074
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136073
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136092
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136091
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136090
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136089
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136088
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136087
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136086
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136085
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136084
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136083
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:29 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136102
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:29 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136101
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:29 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136100
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:29 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136099
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:29 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136098
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:29 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136097
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:29 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136096
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:29 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136095
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:29 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136094
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:29 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136093
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136112
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136111
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136110
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136109
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136108
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136107
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136106
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136105
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136104
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136103
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136122
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136121
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136120
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136119
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136118
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136117
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136116
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136115
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136114
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136113
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136132
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136131
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136130
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136129
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136128
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136127
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136126
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136125
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136124
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136123
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136142
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136141
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136140
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136139
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136138
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136137
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136136
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136135
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136134
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136133
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136152
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136151
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136150
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136149
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136148
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136147
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136146
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136145
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136144
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136143
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136162
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136161
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136160
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136159
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136158
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136157
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136156
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136155
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136154
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:56:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136153
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:03 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136172
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:03 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136171
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:03 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136170
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:03 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136169
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:03 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136168
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:03 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136167
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:03 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136166
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:03 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136165
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:03 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136164
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:03 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136163
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:09 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136182
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:09 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136181
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:09 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136180
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:09 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136179
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:09 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136178
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:09 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136177
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:09 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136176
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:09 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136175
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:09 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136174
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:09 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136173
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136192
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136191
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136190
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136189
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136188
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136187
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136186
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136185
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136184
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136183
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:17 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136202
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:17 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136201
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:17 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136200
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:17 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136199
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:17 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136198
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:17 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136197
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:17 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136196
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:17 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136195
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:17 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136194
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:17 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136193
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136212
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136211
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136210
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136209
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136208
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136207
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136206
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136205
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136204
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136203
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:27 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136218
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:27 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136217
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:27 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136216
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:27 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136215
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:27 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136214
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:27 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136213
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136222
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136221
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136220
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136219
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136232
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136231
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136230
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136229
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136228
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136227
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136226
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136225
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136224
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136223
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:36 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136242
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:36 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136241
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:36 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136240
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:36 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136239
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:36 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136238
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:36 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136237
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:36 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136236
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:36 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136235
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:36 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136234
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:36 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136233
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136252
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136251
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136250
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136249
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136248
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136247
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136246
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136245
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136244
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136243
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:46 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136262
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:46 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136261
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:46 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136260
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:46 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136259
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:46 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136258
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:46 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136257
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:46 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136256
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:46 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136255
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:46 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136254
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:46 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136253
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136272
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136271
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136270
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136269
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136268
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136267
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136266
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136265
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136264
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136263
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136282
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136281
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136280
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136279
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136278
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136277
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136276
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136275
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136274
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136273
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136292
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136291
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136290
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136289
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136288
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136287
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136286
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136285
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136284
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:57:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136283
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:04 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136302
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:04 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136301
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:04 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136300
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:04 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136299
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:04 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136298
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:04 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136297
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:04 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136296
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:04 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136295
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:04 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136294
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:04 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136293
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:10 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136312
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:10 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136311
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:10 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136310
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:10 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136309
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:10 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136308
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:10 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136307
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:10 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136306
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:10 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136305
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:10 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136304
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:10 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136303
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136322
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136321
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136320
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136319
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136318
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136317
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136316
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136315
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136314
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136313
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136332
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136331
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136330
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136329
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136328
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136327
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136326
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136325
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136324
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136323
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:26 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136342
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:26 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136341
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:26 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136340
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:26 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136339
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:26 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136338
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:26 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136337
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:26 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136336
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:26 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136335
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:26 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136334
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:26 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136333
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136352
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136351
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136350
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136349
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136348
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136347
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136346
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136345
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136344
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136343
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136362
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136361
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136360
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136359
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136358
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136357
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136356
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136355
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136354
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136353
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136372
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136371
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136370
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136369
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136368
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136367
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136366
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136365
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136364
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:42 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136363
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:46 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136382
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:46 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136381
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:46 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136380
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:46 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136379
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:46 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136378
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:46 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136377
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:46 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136376
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:46 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136375
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:46 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136374
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:46 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136373
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136392
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136391
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136390
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136389
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136388
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136387
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136386
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136385
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136384
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136383
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136402
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136401
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136400
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136399
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136398
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136397
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136396
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136395
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136394
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:58:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136393
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136412
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136411
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136410
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136409
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136408
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136407
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136406
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136405
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136404
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136403
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136422
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136421
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136420
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136419
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136418
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136417
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136416
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136415
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136414
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136413
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136432
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136431
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136430
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136429
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136428
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136427
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136426
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136425
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136424
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136423
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136442
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136441
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136440
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136439
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136438
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136437
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136436
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136435
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136434
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136433
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:24 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136452
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:24 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136451
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:24 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136450
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:24 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136449
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:24 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136448
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:24 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136447
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:24 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136446
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:24 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136445
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:24 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136444
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:24 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136443
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136462
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136461
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136460
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136459
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136458
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136457
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136456
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136455
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136454
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136453
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136472
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136471
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136470
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136469
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136468
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136467
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136466
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136465
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136464
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136463
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136482
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136481
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136480
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136479
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136478
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136477
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136476
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136475
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136474
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136473
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136492
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136491
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136490
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136489
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136488
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136487
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136486
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136485
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136484
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136483
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:49 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136502
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:49 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136501
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:49 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136500
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:49 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136499
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:49 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136498
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:49 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136497
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:49 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136496
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:49 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136495
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:49 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136494
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:49 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136493
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136512
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136511
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136510
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136509
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136508
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136507
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136506
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136505
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136504
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136503
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136522
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136521
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136520
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136519
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136518
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136517
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136516
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136515
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136514
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 02:59:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136513
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:05 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136532
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:05 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136531
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:05 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136530
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:05 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136529
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:05 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136528
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:05 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136527
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:05 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136526
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:05 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136525
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:05 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136524
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:05 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136523
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:09 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136542
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:09 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136541
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:09 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136540
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:09 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136539
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:09 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136538
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:09 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136537
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:09 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136536
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:09 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136535
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:09 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136534
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:09 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136533
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136552
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136551
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136550
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136549
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136548
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136547
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136546
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136545
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136544
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136543
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136562
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136561
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136560
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136559
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136558
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136557
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136556
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136555
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136554
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136553
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:27 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136572
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:27 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136571
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:27 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136570
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:27 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136569
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:27 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136568
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:27 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136567
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:27 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136566
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:27 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136565
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:27 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136564
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:27 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136563
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136582
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136581
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136580
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136579
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136578
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136577
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136576
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136575
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136574
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136573
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136592
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136591
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136590
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136589
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136588
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136587
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136586
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136585
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136584
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136583
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136602
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136601
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136600
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136599
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136598
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136597
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136596
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136595
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136594
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136593
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:49 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136612
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:49 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136611
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:49 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136610
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:49 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136609
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:49 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136608
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:49 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136607
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:49 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136606
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:49 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136605
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:49 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136604
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:49 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136603
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136622
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136621
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136620
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136619
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136618
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136617
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136616
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136615
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136614
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136613
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136632
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136631
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136630
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136629
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136628
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136627
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136626
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136625
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136624
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:00:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136623
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:03 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136642
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:03 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136641
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:03 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136640
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:03 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136639
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:03 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136638
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:03 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136637
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:03 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136636
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:03 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136635
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:03 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136634
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:03 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136633
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136652
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136651
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136650
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136649
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136648
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136647
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136646
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136645
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136644
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136643
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136662
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136661
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136660
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136659
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136658
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136657
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136656
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136655
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136654
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136653
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136672
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136671
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136670
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136669
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136668
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136667
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136666
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136665
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136664
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136663
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136682
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136681
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136680
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136679
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136678
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136677
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136676
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136675
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136674
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136673
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136692
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136691
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136690
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136689
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136688
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136687
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136686
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136685
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136684
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136683
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136702
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136701
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136700
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136699
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136698
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136697
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136696
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136695
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136694
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136693
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:37 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136712
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:37 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136711
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:37 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136710
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:37 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136709
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:37 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136708
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:37 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136707
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:37 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136706
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:37 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136705
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:37 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136704
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:37 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136703
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:41 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136722
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:41 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136721
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:41 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136720
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:41 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136719
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:41 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136718
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:41 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136717
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:41 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136716
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:41 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136715
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:41 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136714
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:41 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136713
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136732
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136731
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136730
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136729
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136728
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136727
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136726
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136725
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136724
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136723
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136742
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136741
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136740
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136739
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136738
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136737
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136736
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136735
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136734
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136733
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136752
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136751
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136750
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136749
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136748
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136747
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136746
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136745
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136744
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:01:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136743
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136762
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136761
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136760
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136759
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136758
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136757
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136756
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136755
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136754
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136753
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136772
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136771
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136770
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136769
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136768
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136767
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136766
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136765
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136764
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136763
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136782
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136781
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136780
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136779
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136778
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136777
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136776
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136775
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136774
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136773
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:17 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136792
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:17 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136791
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:17 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136790
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:17 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136789
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:17 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136788
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:17 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136787
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:17 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136786
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:17 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136785
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:17 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136784
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:17 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136783
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136802
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136801
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136800
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136799
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136798
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136797
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136796
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136795
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136794
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136793
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136812
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136811
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136810
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136809
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136808
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136807
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136806
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136805
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136804
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:28 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136803
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136822
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136821
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136820
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136819
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136818
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136817
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136816
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136815
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136814
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136813
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136832
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136831
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136830
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136829
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136828
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136827
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136826
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136825
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136824
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136823
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136842
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136841
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136840
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136839
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136838
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136837
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136836
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136835
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136834
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136833
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136852
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136851
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136850
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136849
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136848
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136847
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136846
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136845
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136844
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136843
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:53 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136862
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:53 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136861
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:53 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136860
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:53 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136859
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:53 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136858
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:53 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136857
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:53 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136856
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:53 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136855
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:53 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136854
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:53 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136853
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136872
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136871
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136870
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136869
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136868
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136867
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136866
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136865
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136864
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:02:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136863
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136882
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136881
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136880
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136879
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136878
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136877
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136876
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136875
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136874
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136873
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136892
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136891
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136890
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136889
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136888
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136887
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136886
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136885
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136884
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136883
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:11 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136902
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:11 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136901
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:11 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136900
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:11 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136899
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:11 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136898
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:11 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136897
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:11 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136896
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:11 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136895
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:11 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136894
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:11 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136893
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136912
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136911
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136910
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136909
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136908
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136907
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136906
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136905
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136904
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:15 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136903
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136922
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136921
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136920
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136919
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136918
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136917
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136916
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136915
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136914
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136913
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136928
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136927
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136926
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136925
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136924
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:25 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136923
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:26 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136932
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:26 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136931
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:26 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136930
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:26 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136929
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136942
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136941
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136940
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136939
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136938
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136937
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136936
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136935
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136934
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:32 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136933
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136952
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136951
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136950
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136949
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136948
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136947
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136946
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136945
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136944
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136943
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136962
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136961
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136960
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136959
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136958
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136957
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136956
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136955
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136954
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136953
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136972
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136971
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136970
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136969
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136968
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136967
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136966
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136965
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136964
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136963
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136982
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136981
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136980
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136979
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136978
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136977
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136976
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136975
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136974
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136973
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:56 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136992
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:56 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136991
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:56 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136990
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:56 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136989
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:56 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136988
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:56 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136987
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:56 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136986
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:56 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136985
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:56 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136984
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:03:56 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136983
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137002
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137001
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137000
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136999
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136998
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136997
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136996
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136995
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2136994
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2136993
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:04 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137012
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:04 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137011
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:04 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137010
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:04 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137009
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:04 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137008
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:04 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137007
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:04 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137006
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:04 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137005
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:04 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137004
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:04 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137003
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:10 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137022
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:10 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137021
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:10 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137020
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:10 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137019
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:10 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137018
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:10 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137017
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:10 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137016
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:10 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137015
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:10 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137014
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:10 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137013
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137032
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137031
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137030
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137029
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137028
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137027
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137026
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137025
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137024
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137023
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137042
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137041
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137040
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137039
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137038
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137037
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137036
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137035
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137034
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:19 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137033
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137052
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137051
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137050
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137049
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137048
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137047
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137046
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137045
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137044
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137043
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:29 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137062
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:29 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137061
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:29 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137060
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:29 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137059
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:29 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137058
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:29 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137057
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:29 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137056
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:29 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137055
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:29 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137054
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:29 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137053
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137072
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137071
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137070
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137069
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137068
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137067
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137066
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137065
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137064
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137063
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137082
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137081
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137080
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137079
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137078
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137077
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137076
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137075
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137074
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137073
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:46 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137092
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:46 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137091
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:46 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137090
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:46 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137089
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:46 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137088
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:46 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137087
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:46 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137086
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:46 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137085
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:46 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137084
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:46 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137083
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137102
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137101
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137100
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137099
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137098
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137097
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137096
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137095
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137094
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137093
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137112
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137111
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137110
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137109
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137108
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137107
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137106
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137105
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137104
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:04:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137103
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137122
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137121
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137120
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137119
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137118
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137117
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137116
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137115
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137114
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137113
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137132
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137131
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137130
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137129
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137128
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137127
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137126
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137125
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137124
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137123
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137142
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137141
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137140
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137139
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137138
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137137
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137136
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137135
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137134
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137133
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:16 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137152
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:16 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137151
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:16 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137150
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:16 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137149
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:16 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137148
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:16 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137147
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:16 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137146
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:16 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137145
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:16 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137144
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:16 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137143
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137162
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137161
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137160
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137159
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137158
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137157
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137156
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137155
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137154
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:21 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137153
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:26 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137172
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:26 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137171
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:26 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137170
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:26 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137169
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:26 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137168
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:26 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137167
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:26 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137166
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:26 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137165
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:26 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137164
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:26 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137163
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:31 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137182
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:31 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137181
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:31 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137180
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:31 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137179
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:31 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137178
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:31 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137177
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:31 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137176
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:31 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137175
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:31 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137174
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:31 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137173
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137192
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137191
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137190
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137189
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137188
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137187
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137186
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137185
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137184
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137183
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137202
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137201
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137200
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137199
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137198
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137197
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137196
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137195
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137194
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137193
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:46 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137212
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:46 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137211
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:46 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137210
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:46 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137209
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:46 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137208
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:46 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137207
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:46 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137206
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:46 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137205
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:46 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137204
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:46 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137203
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137222
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137221
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137220
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137219
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137218
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137217
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137216
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137215
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137214
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137213
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137232
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137231
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137230
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137229
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137228
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137227
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137226
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137225
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137224
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137223
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137242
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137241
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137240
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137239
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137238
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137237
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137236
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137235
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137234
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:05:59 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137233
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:03 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137252
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:03 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137251
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:03 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137250
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:03 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137249
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:03 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137248
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:03 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137247
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:03 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137246
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:03 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137245
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:03 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137244
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:03 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137243
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137262
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137261
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137260
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137259
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137258
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137257
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137256
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137255
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137254
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:07 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137253
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137272
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137271
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137270
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137269
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137268
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137267
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137266
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137265
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137264
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137263
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137282
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137281
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137280
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137279
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137278
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137277
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137276
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137275
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137274
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137273
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137292
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137291
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137290
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137289
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137288
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137287
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137286
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137285
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137284
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137283
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:29 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137302
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:29 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137301
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:29 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137300
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:29 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137299
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:29 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137298
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:29 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137297
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:29 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137296
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:29 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137295
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:29 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137294
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:29 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137293
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137312
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137311
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137310
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137309
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137308
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137307
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137306
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137305
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137304
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137303
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:37 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137322
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:37 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137321
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:37 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137320
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:37 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137319
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:37 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137318
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:37 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137317
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:37 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137316
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:37 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137315
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:37 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137314
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:37 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137313
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:41 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137332
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:41 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137331
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:41 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137330
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:41 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137329
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:41 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137328
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:41 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137327
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:41 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137326
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:41 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137325
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:41 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137324
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:41 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137323
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137342
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137341
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137340
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137339
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137338
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137337
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137336
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137335
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137334
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137333
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137352
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137351
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137350
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137349
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137348
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137347
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137346
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137345
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137344
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:51 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137343
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137362
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137361
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137360
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137359
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137358
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137357
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137356
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137355
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137354
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:06:55 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137353
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137372
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137371
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137370
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137369
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137368
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137367
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137366
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137365
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137364
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137363
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137382
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137381
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137380
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137379
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137378
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137377
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137376
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137375
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137374
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137373
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:11 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137392
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:11 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137391
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:11 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137390
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:11 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137389
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:11 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137388
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:11 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137387
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:11 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137386
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:11 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137385
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:11 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137384
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:11 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137383
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:17 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137402
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:17 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137401
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:17 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137400
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:17 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137399
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:17 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137398
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:17 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137397
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:17 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137396
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:17 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137395
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:17 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137394
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:17 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137393
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137412
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137411
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137410
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137409
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137408
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137407
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137406
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137405
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137404
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:23 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137403
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:27 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137422
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:27 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137421
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:27 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137420
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:27 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137419
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:27 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137418
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:27 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137417
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:27 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137416
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:27 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137415
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:27 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137414
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:27 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137413
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137432
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137431
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137430
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137429
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137428
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137427
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137426
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137425
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137424
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:33 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137423
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137442
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137441
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137440
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137439
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137438
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137437
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137436
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137435
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137434
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:38 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137433
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137452
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137451
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137450
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137449
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137448
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137447
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137446
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137445
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137444
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:44 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137443
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137462
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137461
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137460
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137459
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137458
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137457
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137456
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137455
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137454
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137453
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:54 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137472
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:54 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137471
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:54 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137470
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:54 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137469
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:54 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137468
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:54 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137467
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:54 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137466
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:54 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137465
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:54 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137464
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:54 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137463
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:58 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137482
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:58 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137481
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:58 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137480
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:58 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137479
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:58 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137478
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:58 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137477
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:58 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137476
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:58 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137475
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:58 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137474
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:07:58 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137473
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137492
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137491
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137490
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137489
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137488
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137487
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137486
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137485
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137484
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137483
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137502
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137501
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137500
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137499
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137498
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137497
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137496
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137495
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137494
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:08 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137493
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137512
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137511
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137510
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137509
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137508
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137507
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137506
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137505
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137504
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:14 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137503
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:20 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137522
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:20 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137521
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:20 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137520
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:20 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137519
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:20 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137518
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:20 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137517
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:20 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137516
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:20 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137515
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:20 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137514
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:20 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137513
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:24 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137532
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:24 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137531
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:24 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137530
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:24 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137529
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:24 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137528
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:24 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137527
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:24 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137526
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:24 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137525
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:24 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137524
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:24 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137523
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137542
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137541
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137540
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137539
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137538
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137537
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137536
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137535
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137534
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137533
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137552
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137551
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137550
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137549
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137548
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137547
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137546
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137545
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137544
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:34 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137543
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137562
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137561
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137560
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137559
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137558
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137557
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137556
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137555
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137554
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:40 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137553
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:45 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137572
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:45 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137571
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:45 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137570
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:45 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137569
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:45 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137568
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:45 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137567
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:45 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137566
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:45 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137565
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:45 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137564
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:45 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137563
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137582
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137581
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137580
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137579
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137578
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137577
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137576
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137575
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137574
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:50 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137573
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:54 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137592
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:54 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137591
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:54 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137590
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:54 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137589
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:54 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137588
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:54 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137587
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:54 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137586
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:54 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137585
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:54 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137584
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:08:54 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137583
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137602
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137601
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137600
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137599
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137598
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137597
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137596
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137595
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137594
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:00 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137593
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137612
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137611
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137610
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137609
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137608
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137607
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137606
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137605
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137604
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:06 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137603
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137640
Keywords=None
Message=Started invocation of ScriptBlock ID: e961f72a-85ab-4191-bc40-ac9c3afaebf0
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137639
Keywords=None
Message=Started invocation of ScriptBlock ID: 9e63a023-5d0c-4272-bb10-075e68f84cf1
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137638
Keywords=None
Message=Completed invocation of ScriptBlock ID: 5f2a070f-30fe-41c4-a783-e46202d37577
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137637
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137636
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137635
Keywords=None
Message=Started invocation of ScriptBlock ID: 5f2a070f-30fe-41c4-a783-e46202d37577
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137634
Keywords=None
Message=Completed invocation of ScriptBlock ID: 642ed007-c5d4-4d5c-9014-4f4fa368ff56
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137633
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137632
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137631
Keywords=None
Message=Started invocation of ScriptBlock ID: 642ed007-c5d4-4d5c-9014-4f4fa368ff56
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137630
Keywords=None
Message=Started invocation of ScriptBlock ID: 9217efeb-7d82-4c7b-a9df-8144b1ab2909
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137629
Keywords=None
Message=Completed invocation of ScriptBlock ID: 27ea232a-3a5f-4d3d-a2ca-ea78f02a7bfe
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137628
Keywords=None
Message=Started invocation of ScriptBlock ID: 27ea232a-3a5f-4d3d-a2ca-ea78f02a7bfe
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2137627
Keywords=None
Message=Creating Scriptblock text (1 of 1):
net use

ScriptBlock ID: 27ea232a-3a5f-4d3d-a2ca-ea78f02a7bfe
Path:
09/10/2021 03:09:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137626
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137625
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137624
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137623
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137622
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137621
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137620
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137619
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137618
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137617
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137616
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137615
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137614
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:12 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137613
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137647
Keywords=None
Message=Completed invocation of ScriptBlock ID: 9217efeb-7d82-4c7b-a9df-8144b1ab2909
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137646
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137645
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137644
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137643
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137642
Keywords=None
Message=Completed invocation of ScriptBlock ID: 9e63a023-5d0c-4272-bb10-075e68f84cf1
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:13 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137641
Keywords=None
Message=Completed invocation of ScriptBlock ID: e961f72a-85ab-4191-bc40-ac9c3afaebf0
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137682
Keywords=None
Message=Completed invocation of ScriptBlock ID: 9217efeb-7d82-4c7b-a9df-8144b1ab2909
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137681
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137680
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137679
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137678
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137677
Keywords=None
Message=Completed invocation of ScriptBlock ID: 9e63a023-5d0c-4272-bb10-075e68f84cf1
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137676
Keywords=None
Message=Completed invocation of ScriptBlock ID: e961f72a-85ab-4191-bc40-ac9c3afaebf0
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137675
Keywords=None
Message=Started invocation of ScriptBlock ID: e961f72a-85ab-4191-bc40-ac9c3afaebf0
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137674
Keywords=None
Message=Started invocation of ScriptBlock ID: 9e63a023-5d0c-4272-bb10-075e68f84cf1
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137673
Keywords=None
Message=Completed invocation of ScriptBlock ID: 5f2a070f-30fe-41c4-a783-e46202d37577
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137672
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137671
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137670
Keywords=None
Message=Started invocation of ScriptBlock ID: 5f2a070f-30fe-41c4-a783-e46202d37577
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137669
Keywords=None
Message=Completed invocation of ScriptBlock ID: 642ed007-c5d4-4d5c-9014-4f4fa368ff56
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137668
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137667
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137666
Keywords=None
Message=Started invocation of ScriptBlock ID: 642ed007-c5d4-4d5c-9014-4f4fa368ff56
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137665
Keywords=None
Message=Started invocation of ScriptBlock ID: 9217efeb-7d82-4c7b-a9df-8144b1ab2909
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137664
Keywords=None
Message=Completed invocation of ScriptBlock ID: 5f4343b3-faeb-4797-b0d1-fd43582ff90b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137663
Keywords=None
Message=Started invocation of ScriptBlock ID: 5f4343b3-faeb-4797-b0d1-fd43582ff90b
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2137662
Keywords=None
Message=Creating Scriptblock text (1 of 1):
arp -a

ScriptBlock ID: 5f4343b3-faeb-4797-b0d1-fd43582ff90b
Path:
09/10/2021 03:09:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137661
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137660
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137659
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137658
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137657
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137656
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137655
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137654
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137653
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137652
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137651
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137650
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137649
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:18 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137648
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137692
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137691
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137690
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137689
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137688
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137687
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137686
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137685
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137684
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:22 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137683
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:26 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137702
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:26 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137701
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:26 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137700
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:26 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137699
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:26 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137698
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:26 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137697
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:26 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137696
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:26 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137695
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:26 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137694
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:26 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137693
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137712
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137711
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137710
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137709
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137708
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137707
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137706
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137705
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137704
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:30 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137703
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137747
Keywords=None
Message=Completed invocation of ScriptBlock ID: 9217efeb-7d82-4c7b-a9df-8144b1ab2909
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137746
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137745
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137744
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137743
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137742
Keywords=None
Message=Completed invocation of ScriptBlock ID: 9e63a023-5d0c-4272-bb10-075e68f84cf1
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137741
Keywords=None
Message=Completed invocation of ScriptBlock ID: e961f72a-85ab-4191-bc40-ac9c3afaebf0
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137740
Keywords=None
Message=Started invocation of ScriptBlock ID: e961f72a-85ab-4191-bc40-ac9c3afaebf0
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137739
Keywords=None
Message=Started invocation of ScriptBlock ID: 9e63a023-5d0c-4272-bb10-075e68f84cf1
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137738
Keywords=None
Message=Completed invocation of ScriptBlock ID: 5f2a070f-30fe-41c4-a783-e46202d37577
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137737
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137736
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137735
Keywords=None
Message=Started invocation of ScriptBlock ID: 5f2a070f-30fe-41c4-a783-e46202d37577
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137734
Keywords=None
Message=Completed invocation of ScriptBlock ID: 642ed007-c5d4-4d5c-9014-4f4fa368ff56
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137733
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137732
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137731
Keywords=None
Message=Started invocation of ScriptBlock ID: 642ed007-c5d4-4d5c-9014-4f4fa368ff56
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137730
Keywords=None
Message=Started invocation of ScriptBlock ID: 9217efeb-7d82-4c7b-a9df-8144b1ab2909
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137729
Keywords=None
Message=Completed invocation of ScriptBlock ID: 226fd2d7-f781-407a-8dc8-80d2487e5ccd
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137728
Keywords=None
Message=Started invocation of ScriptBlock ID: 226fd2d7-f781-407a-8dc8-80d2487e5ccd
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2137727
Keywords=None
Message=Creating Scriptblock text (1 of 1):
netstat -ano

ScriptBlock ID: 226fd2d7-f781-407a-8dc8-80d2487e5ccd
Path:
09/10/2021 03:09:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137726
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137725
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137724
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137723
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137722
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137721
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137720
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137719
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137718
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137717
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137716
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137715
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137714
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:35 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137713
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137757
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137756
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137755
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137754
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137753
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137752
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137751
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137750
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137749
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:39 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137748
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137767
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137766
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137765
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137764
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137763
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137762
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137761
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137760
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137759
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:43 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137758
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=53504
EventType=4
Type=Information
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=PowerShell Named Pipe IPC
OpCode=Open (async)
RecordNumber=2137785
Keywords=None
Message=Windows PowerShell has started an IPC listening thread on process: 5688 in AppDomain: DefaultAppDomain.
09/10/2021 03:09:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=40961
EventType=4
Type=Information
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=PowerShell Console Startup
OpCode=Start
RecordNumber=2137784
Keywords=None
Message=PowerShell console is starting up
09/10/2021 03:09:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137783
Keywords=None
Message=Started invocation of ScriptBlock ID: 7e163f9b-d174-46d3-b543-256c4e6db95a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2137782
Keywords=None
Message=Creating Scriptblock text (1 of 1):
cmd.exe /c powershell.exe Get-NetTcpConnection

ScriptBlock ID: 7e163f9b-d174-46d3-b543-256c4e6db95a
Path:
09/10/2021 03:09:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137781
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137780
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137779
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137778
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137777
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137776
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137775
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137774
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137773
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137772
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137771
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137770
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137769
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:47 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137768
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138262
Keywords=None
Message=Completed invocation of ScriptBlock ID: 9217efeb-7d82-4c7b-a9df-8144b1ab2909
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138261
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138260
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138259
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138258
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138257
Keywords=None
Message=Completed invocation of ScriptBlock ID: 9e63a023-5d0c-4272-bb10-075e68f84cf1
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138256
Keywords=None
Message=Completed invocation of ScriptBlock ID: e961f72a-85ab-4191-bc40-ac9c3afaebf0
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138255
Keywords=None
Message=Started invocation of ScriptBlock ID: e961f72a-85ab-4191-bc40-ac9c3afaebf0
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138254
Keywords=None
Message=Started invocation of ScriptBlock ID: 9e63a023-5d0c-4272-bb10-075e68f84cf1
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138253
Keywords=None
Message=Completed invocation of ScriptBlock ID: 5f2a070f-30fe-41c4-a783-e46202d37577
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138252
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138251
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138250
Keywords=None
Message=Started invocation of ScriptBlock ID: 5f2a070f-30fe-41c4-a783-e46202d37577
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138249
Keywords=None
Message=Completed invocation of ScriptBlock ID: 642ed007-c5d4-4d5c-9014-4f4fa368ff56
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138248
Keywords=None
Message=Completed invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138247
Keywords=None
Message=Started invocation of ScriptBlock ID: d4a74703-fad6-4428-b0e5-caafad48ac1d
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138246
Keywords=None
Message=Started invocation of ScriptBlock ID: 642ed007-c5d4-4d5c-9014-4f4fa368ff56
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138245
Keywords=None
Message=Started invocation of ScriptBlock ID: 9217efeb-7d82-4c7b-a9df-8144b1ab2909
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138244
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7e163f9b-d174-46d3-b543-256c4e6db95a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138243
Keywords=None
Message=Completed invocation of ScriptBlock ID: 5055cd90-1134-406a-a4e0-0167f200691b
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138242
Keywords=None
Message=Started invocation of ScriptBlock ID: 5055cd90-1134-406a-a4e0-0167f200691b
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2138241
Keywords=None
Message=Creating Scriptblock text (1 of 1):
$global:?

ScriptBlock ID: 5055cd90-1134-406a-a4e0-0167f200691b
Path:
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138240
Keywords=None
Message=Completed invocation of ScriptBlock ID: f4c3dcf8-071d-42d9-9805-1ee066031172
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138239
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138238
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138237
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138236
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138235
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138234
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138233
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138232
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138231
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138230
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138229
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138228
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138227
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138226
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138225
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138224
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138223
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138222
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138221
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138220
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138219
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138218
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138217
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138216
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138215
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138214
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138213
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138212
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138211
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138210
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138209
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138208
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138207
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138206
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138205
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138204
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138203
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138202
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138201
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138200
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138199
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138198
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138197
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138196
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138195
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138194
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138193
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138192
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138191
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138190
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138189
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138188
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138187
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138186
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138185
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138184
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138183
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138182
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138181
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138180
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138179
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138178
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138177
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138176
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138175
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138174
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138173
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138172
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138171
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138170
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138169
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138168
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138167
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138166
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138165
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138164
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138163
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138162
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138161
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138160
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138159
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138158
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138157
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138156
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138155
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138154
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138153
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138152
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138151
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138150
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138149
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138148
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138147
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138146
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138145
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138144
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138143
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138142
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138141
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138140
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138139
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138138
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138137
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138136
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138135
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138134
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138133
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138132
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138131
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138130
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138129
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138128
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138127
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138126
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138125
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138124
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138123
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138122
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138121
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138120
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138119
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138118
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138117
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138116
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138115
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138114
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138113
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138112
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138111
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138110
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138109
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138108
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138107
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138106
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138105
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138104
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138103
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138102
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138101
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138100
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138099
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138098
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138097
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138096
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138095
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138094
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138093
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138092
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138091
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138090
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138089
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138088
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138087
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138086
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138085
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138084
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138083
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138082
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138081
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138080
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138079
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138078
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138077
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138076
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138075
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138074
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138073
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138072
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138071
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138070
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138069
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138068
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138067
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138066
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138065
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138064
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138063
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138062
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138061
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138060
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138059
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138058
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138057
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138056
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138055
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138054
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138053
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138052
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138051
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138050
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138049
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138048
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138047
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138046
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138045
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138044
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138043
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138042
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138041
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138040
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138039
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138038
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138037
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138036
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138035
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138034
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138033
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138032
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138031
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138030
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138029
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138028
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138027
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138026
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138025
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138024
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138023
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138022
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138021
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138020
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138019
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138018
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138017
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138016
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138015
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138014
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138013
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138012
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138011
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138010
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138009
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138008
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138007
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138006
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138005
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138004
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138003
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138002
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138001
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138000
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137999
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137998
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137997
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137996
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137995
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137994
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137993
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137992
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137991
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137990
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137989
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137988
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137987
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137986
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137985
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137984
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137983
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137982
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137981
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137980
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137979
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137978
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137977
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137976
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137975
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137974
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137973
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137972
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137971
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137970
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137969
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137968
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137967
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137966
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137965
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137964
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137963
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137962
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137961
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137960
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137959
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137958
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137957
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137956
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137955
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137954
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137953
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137952
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137951
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137950
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137949
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137948
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137947
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137946
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137945
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137944
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137943
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137942
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137941
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137940
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137939
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137938
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137937
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137936
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137935
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137934
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137933
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137932
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137931
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137930
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137929
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137928
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137927
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137926
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137925
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137924
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137923
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137922
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137921
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137920
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137919
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137918
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137917
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137916
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137915
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137914
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137913
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137912
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137911
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137910
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137909
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137908
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137907
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137906
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137905
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137904
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137903
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137902
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137901
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137900
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137899
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137898
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137897
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137896
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137895
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137894
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137893
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137892
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137891
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137890
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137889
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137888
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137887
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137886
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137885
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137884
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137883
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137882
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137881
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137880
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137879
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137878
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137877
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137876
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137875
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137874
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137873
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137872
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137871
Keywords=None
Message=Completed invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137870
Keywords=None
Message=Started invocation of ScriptBlock ID: f6a4beed-b28b-43ca-b4c2-0713e0d67ccd
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137869
Keywords=None
Message=Completed invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137868
Keywords=None
Message=Started invocation of ScriptBlock ID: 7b473814-9fb1-4312-8697-223797692163
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137867
Keywords=None
Message=Completed invocation of ScriptBlock ID: 5e032228-b019-4ab3-85f9-c6730c43ea58
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137866
Keywords=None
Message=Started invocation of ScriptBlock ID: 5e032228-b019-4ab3-85f9-c6730c43ea58
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2137865
Keywords=None
Message=Creating Scriptblock text (1 of 1):
function __cmdletization_BindCommonParameters
{
    param(
        $__cmdletization_objectModelWrapper,
        $myPSBoundParameters
    )       
                

        if ($myPSBoundParameters.ContainsKey('CimSession')) { 
            $__cmdletization_objectModelWrapper.PSObject.Properties['CimSession'].Value = $myPSBoundParameters['CimSession'] 
        }
                    

        if ($myPSBoundParameters.ContainsKey('ThrottleLimit')) { 
            $__cmdletization_objectModelWrapper.PSObject.Properties['ThrottleLimit'].Value = $myPSBoundParameters['ThrottleLimit'] 
        }
                    

        if ($myPSBoundParameters.ContainsKey('AsJob')) { 
            $__cmdletization_objectModelWrapper.PSObject.Properties['AsJob'].Value = $myPSBoundParameters['AsJob'] 
        }
                    

}

ScriptBlock ID: 5e032228-b019-4ab3-85f9-c6730c43ea58
Path:
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137864
Keywords=None
Message=Completed invocation of ScriptBlock ID: f363a1e8-62df-413d-aa75-d611409f2217
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137863
Keywords=None
Message=Started invocation of ScriptBlock ID: f363a1e8-62df-413d-aa75-d611409f2217
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137862
Keywords=None
Message=Completed invocation of ScriptBlock ID: ee27bcbf-716b-4b72-be45-28de907b19d8
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137861
Keywords=None
Message=Completed invocation of ScriptBlock ID: 9a5c9af6-7627-4a5c-aeda-52d98c2d2583
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137860
Keywords=None
Message=Started invocation of ScriptBlock ID: 9a5c9af6-7627-4a5c-aeda-52d98c2d2583
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137859
Keywords=None
Message=Completed invocation of ScriptBlock ID: bd47d46e-7f1a-498b-9f3d-3065b2fc27f0
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137858
Keywords=None
Message=Started invocation of ScriptBlock ID: bd47d46e-7f1a-498b-9f3d-3065b2fc27f0
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137857
Keywords=None
Message=Started invocation of ScriptBlock ID: ee27bcbf-716b-4b72-be45-28de907b19d8
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137856
Keywords=None
Message=Completed invocation of ScriptBlock ID: 01601700-8a76-4057-9c7f-a02ef8d01558
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137855
Keywords=None
Message=Started invocation of ScriptBlock ID: 01601700-8a76-4057-9c7f-a02ef8d01558
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=3
Type=Warning
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2137854
Keywords=None
Message=Creating Scriptblock text (1 of 1):

#requires -version 3.0

try { Microsoft.PowerShell.Core\Set-StrictMode -Off } catch { }

$script:MyModule = $MyInvocation.MyCommand.ScriptBlock.Module

$script:ClassName = 'ROOT/StandardCimv2/MSFT_NetUDPSetting'
$script:ClassVersion = '1.0.0'
$script:ModuleVersion = '1.0.0'
$script:ObjectModelWrapper = [Microsoft.PowerShell.Cmdletization.Cim.CimCmdletAdapter]

$script:PrivateData = [System.Collections.Generic.Dictionary[string,string]]::new()

Microsoft.PowerShell.Core\Export-ModuleMember -Function @()
        

function __cmdletization_BindCommonParameters
{
    param(
        $__cmdletization_objectModelWrapper,
        $myPSBoundParameters
    )       
                

        if ($myPSBoundParameters.ContainsKey('CimSession')) { 
            $__cmdletization_objectModelWrapper.PSObject.Properties['CimSession'].Value = $myPSBoundParameters['CimSession'] 
        }
                    

        if ($myPSBoundParameters.ContainsKey('ThrottleLimit')) { 
            $__cmdletization_objectModelWrapper.PSObject.Properties['ThrottleLimit'].Value = $myPSBoundParameters['ThrottleLimit'] 
        }
                    

        if ($myPSBoundParameters.ContainsKey('AsJob')) { 
            $__cmdletization_objectModelWrapper.PSObject.Properties['AsJob'].Value = $myPSBoundParameters['AsJob'] 
        }
                    

}
                

function Get-NetUDPSetting
{
    [CmdletBinding(DefaultParameterSetName='ByName', PositionalBinding=$false)]
    
    [OutputType([Microsoft.Management.Infrastructure.CimInstance])]
[OutputType('Microsoft.Management.Infrastructure.CimInstance#ROOT/StandardCimv2/MSFT_NetUDPSetting')]

    param(
    
    [Parameter(ParameterSetName='ByName', Position=0)]
    [ValidateNotNull()]
    [uint16[]]
    ${DynamicPortRangeStartPort},

    [Parameter(ParameterSetName='ByName', Position=1)]
    [ValidateNotNull()]
    [uint16[]]
    ${DynamicPortRangeNumberOfPorts},

    [Parameter(ParameterSetName='ByName')]
    [Alias('Session')]
    [ValidateNotNullOrEmpty()]
    [CimSession[]]
    ${CimSession},

    [Parameter(ParameterSetName='ByName')]
    [int]
    ${ThrottleLimit},

    [Parameter(ParameterSetName='ByName')]
    [switch]
    ${AsJob})

    DynamicParam {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper = $script:ObjectModelWrapper::new()
                $__cmdletization_objectModelWrapper.Initialize($PSCmdlet, $script:ClassName, $script:ClassVersion, $script:ModuleVersion, $script:PrivateData)

                if ($__cmdletization_objectModelWrapper -is [System.Management.Automation.IDynamicParameters])
                {
                    ([System.Management.Automation.IDynamicParameters]$__cmdletization_objectModelWrapper).GetDynamicParameters()
                }
            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }

    Begin {
        $__cmdletization_exceptionHasBeenThrown = $false
        try 
        {
            __cmdletization_BindCommonParameters $__cmdletization_objectModelWrapper $PSBoundParameters
            $__cmdletization_objectModelWrapper.BeginProcessing()
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    Process {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
    $__cmdletization_queryBuilder = $__cmdletization_objectModelWrapper.GetQueryBuilder()
    if ($PSBoundParameters.ContainsKey('DynamicPortRangeStartPort') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${DynamicPortRangeStartPort})
        $__cmdletization_queryBuilder.FilterByProperty('DynamicPortRangeStartPort', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('DynamicPortRangeNumberOfPorts') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${DynamicPortRangeNumberOfPorts})
        $__cmdletization_queryBuilder.FilterByProperty('DynamicPortRangeNumberOfPorts', $__cmdletization_values, $false, 'Default')
    }


    $__cmdletization_objectModelWrapper.ProcessRecord($__cmdletization_queryBuilder)
            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    End {
        try
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper.EndProcessing()
            }
        }
        catch
        {
            throw
        }
    }

    # .EXTERNALHELP MSFT_NetUDPSetting.cdxml-Help.xml
}
Microsoft.PowerShell.Core\Export-ModuleMember -Function 'Get-NetUDPSetting' -Alias '*'
        

function Set-NetUDPSetting
{
    [CmdletBinding(DefaultParameterSetName='InputObject (cdxml)', SupportsShouldProcess=$true, ConfirmImpact='Medium', PositionalBinding=$false)]
    
    [OutputType([Microsoft.Management.Infrastructure.CimInstance])]
[OutputType('Microsoft.Management.Infrastructure.CimInstance#ROOT/StandardCimv2/MSFT_NetUDPSetting')]

    param(
    
    [Parameter(ParameterSetName='InputObject (cdxml)', ValueFromPipeline=$true)]
    [PSTypeName('Microsoft.Management.Infrastructure.CimInstance#MSFT_NetUDPSetting')]
    [ValidateNotNull()]
    [ciminstance[]]
    ${InputObject},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [uint16]
    ${DynamicPortRangeStartPort},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [uint16]
    ${DynamicPortRangeNumberOfPorts},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Alias('Session')]
    [ValidateNotNullOrEmpty()]
    [CimSession[]]
    ${CimSession},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [int]
    ${ThrottleLimit},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [switch]
    ${AsJob},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [switch]
    ${PassThru})

    DynamicParam {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper = $script:ObjectModelWrapper::new()
                $__cmdletization_objectModelWrapper.Initialize($PSCmdlet, $script:ClassName, $script:ClassVersion, $script:ModuleVersion, $script:PrivateData)

                if ($__cmdletization_objectModelWrapper -is [System.Management.Automation.IDynamicParameters])
                {
                    ([System.Management.Automation.IDynamicParameters]$__cmdletization_objectModelWrapper).GetDynamicParameters()
                }
            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }

    Begin {
        $__cmdletization_exceptionHasBeenThrown = $false
        try 
        {
            __cmdletization_BindCommonParameters $__cmdletization_objectModelWrapper $PSBoundParameters
            $__cmdletization_objectModelWrapper.BeginProcessing()
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    Process {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
    $__cmdletization_queryBuilder = $__cmdletization_objectModelWrapper.GetQueryBuilder()


    $__cmdletization_methodParameters = [System.Collections.Generic.List[Microsoft.PowerShell.Cmdletization.MethodParameter]]::new()
    switch -exact ($PSCmdlet.ParameterSetName) { 
        { @('InputObject (cdxml)') -contains $_ } {
          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('DynamicPortRangeStartPort')) {
            [object]$__cmdletization_value = ${DynamicPortRangeStartPort}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'DynamicPortRangeStartPort'; ParameterType = 'System.UInt16'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'DynamicPortRangeStartPort'; ParameterType = 'System.UInt16'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('DynamicPortRangeNumberOfPorts')) {
            [object]$__cmdletization_value = ${DynamicPortRangeNumberOfPorts}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'DynamicPortRangeNumberOfPorts'; ParameterType = 'System.UInt16'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'DynamicPortRangeNumberOfPorts'; ParameterType = 'System.UInt16'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

      $__cmdletization_returnValue = $null
      $__cmdletization_methodInvocationInfo = [Microsoft.PowerShell.Cmdletization.MethodInvocationInfo]::new('cim:ModifyInstance', $__cmdletization_methodParameters, $__cmdletization_returnValue)
      $__cmdletization_passThru = $PSBoundParameters.ContainsKey('PassThru') -and $PassThru
            if ($PSBoundParameters.ContainsKey('InputObject')) {
                foreach ($x in $InputObject) { $__cmdletization_objectModelWrapper.ProcessRecord($x, $__cmdletization_methodInvocationInfo, $__cmdletization_PassThru) }
            } else {
                $__cmdletization_objectModelWrapper.ProcessRecord($__cmdletization_queryBuilder, $__cmdletization_methodInvocationInfo, $__cmdletization_PassThru)
            }
        }
    }

            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    End {
        try
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper.EndProcessing()
            }
        }
        catch
        {
            throw
        }
    }

    # .EXTERNALHELP MSFT_NetUDPSetting.cdxml-Help.xml
}
Microsoft.PowerShell.Core\Export-ModuleMember -Function 'Set-NetUDPSetting' -Alias '*'
        


ScriptBlock ID: 01601700-8a76-4057-9c7f-a02ef8d01558
Path:
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137853
Keywords=None
Message=Completed invocation of ScriptBlock ID: 9fb7d7f9-8a8b-4b6f-a12f-12e2ab443522
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137852
Keywords=None
Message=Started invocation of ScriptBlock ID: 9fb7d7f9-8a8b-4b6f-a12f-12e2ab443522
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=3
Type=Warning
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2137851
Keywords=None
Message=Creating Scriptblock text (1 of 1):

#requires -version 3.0

try { Microsoft.PowerShell.Core\Set-StrictMode -Off } catch { }

$script:MyModule = $MyInvocation.MyCommand.ScriptBlock.Module

$script:ClassName = 'ROOT/StandardCimv2/MSFT_NetUDPEndpoint'
$script:ClassVersion = '1.0.0'
$script:ModuleVersion = '1.0.0'
$script:ObjectModelWrapper = [Microsoft.PowerShell.Cmdletization.Cim.CimCmdletAdapter]

$script:PrivateData = [System.Collections.Generic.Dictionary[string,string]]::new()

Microsoft.PowerShell.Core\Export-ModuleMember -Function @()
        

function __cmdletization_BindCommonParameters
{
    param(
        $__cmdletization_objectModelWrapper,
        $myPSBoundParameters
    )       
                

        if ($myPSBoundParameters.ContainsKey('CimSession')) { 
            $__cmdletization_objectModelWrapper.PSObject.Properties['CimSession'].Value = $myPSBoundParameters['CimSession'] 
        }
                    

        if ($myPSBoundParameters.ContainsKey('ThrottleLimit')) { 
            $__cmdletization_objectModelWrapper.PSObject.Properties['ThrottleLimit'].Value = $myPSBoundParameters['ThrottleLimit'] 
        }
                    

        if ($myPSBoundParameters.ContainsKey('AsJob')) { 
            $__cmdletization_objectModelWrapper.PSObject.Properties['AsJob'].Value = $myPSBoundParameters['AsJob'] 
        }
                    

}
                

function Get-NetUDPEndpoint
{
    [CmdletBinding(DefaultParameterSetName='ByName', PositionalBinding=$false)]
    
    [OutputType([Microsoft.Management.Infrastructure.CimInstance])]
[OutputType('Microsoft.Management.Infrastructure.CimInstance#ROOT/StandardCimv2/MSFT_NetUDPEndpoint')]

    param(
    
    [Parameter(ParameterSetName='ByName', Position=0, ValueFromPipelineByPropertyName=$true)]
    [Alias('IPAddress')]
    [ValidateNotNull()]
    [string[]]
    ${LocalAddress},

    [Parameter(ParameterSetName='ByName', Position=1)]
    [ValidateNotNull()]
    [uint16[]]
    ${LocalPort},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [uint32[]]
    ${OwningProcess},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [datetime[]]
    ${CreationTime},

    [Parameter(ParameterSetName='ByName')]
    [Alias('Session')]
    [ValidateNotNullOrEmpty()]
    [CimSession[]]
    ${CimSession},

    [Parameter(ParameterSetName='ByName')]
    [int]
    ${ThrottleLimit},

    [Parameter(ParameterSetName='ByName')]
    [switch]
    ${AsJob})

    DynamicParam {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper = $script:ObjectModelWrapper::new()
                $__cmdletization_objectModelWrapper.Initialize($PSCmdlet, $script:ClassName, $script:ClassVersion, $script:ModuleVersion, $script:PrivateData)

                if ($__cmdletization_objectModelWrapper -is [System.Management.Automation.IDynamicParameters])
                {
                    ([System.Management.Automation.IDynamicParameters]$__cmdletization_objectModelWrapper).GetDynamicParameters()
                }
            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }

    Begin {
        $__cmdletization_exceptionHasBeenThrown = $false
        try 
        {
            __cmdletization_BindCommonParameters $__cmdletization_objectModelWrapper $PSBoundParameters
            $__cmdletization_objectModelWrapper.BeginProcessing()
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    Process {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
    $__cmdletization_queryBuilder = $__cmdletization_objectModelWrapper.GetQueryBuilder()
    if ($PSBoundParameters.ContainsKey('LocalAddress') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${LocalAddress})
        $__cmdletization_queryBuilder.FilterByProperty('LocalAddress', $__cmdletization_values, $true, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('LocalPort') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${LocalPort})
        $__cmdletization_queryBuilder.FilterByProperty('LocalPort', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('OwningProcess') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${OwningProcess})
        $__cmdletization_queryBuilder.FilterByProperty('OwningProcess', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('CreationTime') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${CreationTime})
        $__cmdletization_queryBuilder.FilterByProperty('CreationTime', $__cmdletization_values, $false, 'Default')
    }


    $__cmdletization_objectModelWrapper.ProcessRecord($__cmdletization_queryBuilder)
            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    End {
        try
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper.EndProcessing()
            }
        }
        catch
        {
            throw
        }
    }

    # .EXTERNALHELP MSFT_NetUDPEndpoint.cdxml-Help.xml
}
Microsoft.PowerShell.Core\Export-ModuleMember -Function 'Get-NetUDPEndpoint' -Alias '*'
        


ScriptBlock ID: 9fb7d7f9-8a8b-4b6f-a12f-12e2ab443522
Path:
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137850
Keywords=None
Message=Completed invocation of ScriptBlock ID: e63c1a8e-2e97-428c-8daf-a99bc08e055d
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137849
Keywords=None
Message=Started invocation of ScriptBlock ID: e63c1a8e-2e97-428c-8daf-a99bc08e055d
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=3
Type=Warning
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2137848
Keywords=None
Message=Creating Scriptblock text (3 of 3):
erByProperty('LocalPortStart', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('LocalPortEnd') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${LocalPortEnd})
        $__cmdletization_queryBuilder.FilterByProperty('LocalPortEnd', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('RemotePortStart') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${RemotePortStart})
        $__cmdletization_queryBuilder.FilterByProperty('RemotePortStart', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('RemotePortEnd') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${RemotePortEnd})
        $__cmdletization_queryBuilder.FilterByProperty('RemotePortEnd', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('DestinationPrefix') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${DestinationPrefix})
        $__cmdletization_queryBuilder.FilterByProperty('DestinationPrefix', $__cmdletization_values, $true, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('AssociatedTCPSetting') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
    $__cmdletization_queryBuilder.FilterByAssociatedInstance(${AssociatedTCPSetting}, 'MSFT_NetTransportFilterTCPSetting', 'Dependent', 'Antecedent', 'Default')
    }


    $__cmdletization_methodParameters = [System.Collections.Generic.List[Microsoft.PowerShell.Cmdletization.MethodParameter]]::new()
    switch -exact ($PSCmdlet.ParameterSetName) { 
        { @('ByName', 'InputObject (cdxml)') -contains $_ } {
      $__cmdletization_returnValue = $null
      $__cmdletization_methodInvocationInfo = [Microsoft.PowerShell.Cmdletization.MethodInvocationInfo]::new('cim:DeleteInstance', $__cmdletization_methodParameters, $__cmdletization_returnValue)
      $__cmdletization_passThru = $PSBoundParameters.ContainsKey('PassThru') -and $PassThru
            if ($PSBoundParameters.ContainsKey('InputObject')) {
                foreach ($x in $InputObject) { $__cmdletization_objectModelWrapper.ProcessRecord($x, $__cmdletization_methodInvocationInfo, $__cmdletization_PassThru) }
            } else {
                $__cmdletization_objectModelWrapper.ProcessRecord($__cmdletization_queryBuilder, $__cmdletization_methodInvocationInfo, $__cmdletization_PassThru)
            }
        }
    }

            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    End {
        try
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper.EndProcessing()
            }
        }
        catch
        {
            throw
        }
    }

    # .EXTERNALHELP MSFT_NetTransportFilter.cdxml-Help.xml
}
Microsoft.PowerShell.Core\Export-ModuleMember -Function 'Remove-NetTransportFilter' -Alias '*'
        


ScriptBlock ID: e63c1a8e-2e97-428c-8daf-a99bc08e055d
Path:
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=3
Type=Warning
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2137847
Keywords=None
Message=Creating Scriptblock text (2 of 3):
Thrown)
            {
                $__cmdletization_objectModelWrapper.EndProcessing()
            }
        }
        catch
        {
            throw
        }
    }

    # .EXTERNALHELP MSFT_NetTransportFilter.cdxml-Help.xml
}
Microsoft.PowerShell.Core\Export-ModuleMember -Function 'New-NetTransportFilter' -Alias '*'
        

function Get-NetTransportFilter
{
    [CmdletBinding(PositionalBinding=$false)]
    
    [OutputType([Microsoft.Management.Infrastructure.CimInstance])]
[OutputType('Microsoft.Management.Infrastructure.CimInstance#ROOT/StandardCimv2/MSFT_NetTransportFilter')]

    param(
    
    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [string[]]
    ${SettingName},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetTransportFilter.Protocol[]]
    ${Protocol},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [uint16[]]
    ${LocalPortStart},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [uint16[]]
    ${LocalPortEnd},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [uint16[]]
    ${RemotePortStart},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [uint16[]]
    ${RemotePortEnd},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [string[]]
    ${DestinationPrefix},

    [Parameter(ParameterSetName='ByName', ValueFromPipeline=$true)]
    [PSTypeName('Microsoft.Management.Infrastructure.CimInstance#root/standardcimv2/MSFT_NetTCPSetting')]
    [ValidateNotNull()]
    [ciminstance]
    ${AssociatedTCPSetting},

    [Parameter(ParameterSetName='ByName')]
    [Alias('Session')]
    [ValidateNotNullOrEmpty()]
    [CimSession[]]
    ${CimSession},

    [Parameter(ParameterSetName='ByName')]
    [int]
    ${ThrottleLimit},

    [Parameter(ParameterSetName='ByName')]
    [switch]
    ${AsJob})

    DynamicParam {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper = $script:ObjectModelWrapper::new()
                $__cmdletization_objectModelWrapper.Initialize($PSCmdlet, $script:ClassName, $script:ClassVersion, $script:ModuleVersion, $script:PrivateData)

                if ($__cmdletization_objectModelWrapper -is [System.Management.Automation.IDynamicParameters])
                {
                    ([System.Management.Automation.IDynamicParameters]$__cmdletization_objectModelWrapper).GetDynamicParameters()
                }
            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }

    Begin {
        $__cmdletization_exceptionHasBeenThrown = $false
        try 
        {
            __cmdletization_BindCommonParameters $__cmdletization_objectModelWrapper $PSBoundParameters
            $__cmdletization_objectModelWrapper.BeginProcessing()
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    Process {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
    $__cmdletization_queryBuilder = $__cmdletization_objectModelWrapper.GetQueryBuilder()
    if ($PSBoundParameters.ContainsKey('SettingName') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${SettingName})
        $__cmdletization_queryBuilder.FilterByProperty('SettingName', $__cmdletization_values, $true, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('Protocol') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${Protocol})
        $__cmdletization_queryBuilder.FilterByProperty('Protocol', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('LocalPortStart') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${LocalPortStart})
        $__cmdletization_queryBuilder.FilterByProperty('LocalPortStart', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('LocalPortEnd') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${LocalPortEnd})
        $__cmdletization_queryBuilder.FilterByProperty('LocalPortEnd', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('RemotePortStart') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${RemotePortStart})
        $__cmdletization_queryBuilder.FilterByProperty('RemotePortStart', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('RemotePortEnd') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${RemotePortEnd})
        $__cmdletization_queryBuilder.FilterByProperty('RemotePortEnd', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('DestinationPrefix') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${DestinationPrefix})
        $__cmdletization_queryBuilder.FilterByProperty('DestinationPrefix', $__cmdletization_values, $true, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('AssociatedTCPSetting') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
    $__cmdletization_queryBuilder.FilterByAssociatedInstance(${AssociatedTCPSetting}, 'MSFT_NetTransportFilterTCPSetting', 'Dependent', 'Antecedent', 'Default')
    }


    $__cmdletization_objectModelWrapper.ProcessRecord($__cmdletization_queryBuilder)
            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    End {
        try
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper.EndProcessing()
            }
        }
        catch
        {
            throw
        }
    }

    # .EXTERNALHELP MSFT_NetTransportFilter.cdxml-Help.xml
}
Microsoft.PowerShell.Core\Export-ModuleMember -Function 'Get-NetTransportFilter' -Alias '*'
        

function Remove-NetTransportFilter
{
    [CmdletBinding(SupportsShouldProcess=$true, ConfirmImpact='High', PositionalBinding=$false)]
    
    [OutputType([Microsoft.Management.Infrastructure.CimInstance])]
[OutputType('Microsoft.Management.Infrastructure.CimInstance#ROOT/StandardCimv2/MSFT_NetTransportFilter')]

    param(
    
    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [string[]]
    ${SettingName},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetTransportFilter.Protocol[]]
    ${Protocol},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [uint16[]]
    ${LocalPortStart},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [uint16[]]
    ${LocalPortEnd},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [uint16[]]
    ${RemotePortStart},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [uint16[]]
    ${RemotePortEnd},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [string[]]
    ${DestinationPrefix},

    [Parameter(ParameterSetName='ByName', ValueFromPipeline=$true)]
    [PSTypeName('Microsoft.Management.Infrastructure.CimInstance#root/standardcimv2/MSFT_NetTCPSetting')]
    [ValidateNotNull()]
    [ciminstance]
    ${AssociatedTCPSetting},

    [Parameter(ParameterSetName='InputObject (cdxml)', Mandatory=$true, ValueFromPipeline=$true)]
    [PSTypeName('Microsoft.Management.Infrastructure.CimInstance#MSFT_NetTransportFilter')]
    [ValidateNotNull()]
    [ciminstance[]]
    ${InputObject},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Alias('Session')]
    [ValidateNotNullOrEmpty()]
    [CimSession[]]
    ${CimSession},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [int]
    ${ThrottleLimit},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [switch]
    ${AsJob},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [switch]
    ${PassThru})

    DynamicParam {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper = $script:ObjectModelWrapper::new()
                $__cmdletization_objectModelWrapper.Initialize($PSCmdlet, $script:ClassName, $script:ClassVersion, $script:ModuleVersion, $script:PrivateData)

                if ($__cmdletization_objectModelWrapper -is [System.Management.Automation.IDynamicParameters])
                {
                    ([System.Management.Automation.IDynamicParameters]$__cmdletization_objectModelWrapper).GetDynamicParameters()
                }
            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }

    Begin {
        $__cmdletization_exceptionHasBeenThrown = $false
        try 
        {
            __cmdletization_BindCommonParameters $__cmdletization_objectModelWrapper $PSBoundParameters
            $__cmdletization_objectModelWrapper.BeginProcessing()
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    Process {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
    $__cmdletization_queryBuilder = $__cmdletization_objectModelWrapper.GetQueryBuilder()
    if ($PSBoundParameters.ContainsKey('SettingName') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${SettingName})
        $__cmdletization_queryBuilder.FilterByProperty('SettingName', $__cmdletization_values, $true, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('Protocol') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${Protocol})
        $__cmdletization_queryBuilder.FilterByProperty('Protocol', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('LocalPortStart') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${LocalPortStart})
        $__cmdletization_queryBuilder.Filt

ScriptBlock ID: e63c1a8e-2e97-428c-8daf-a99bc08e055d
Path:
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=3
Type=Warning
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2137846
Keywords=None
Message=Creating Scriptblock text (1 of 3):

#requires -version 3.0

try { Microsoft.PowerShell.Core\Set-StrictMode -Off } catch { }

$script:MyModule = $MyInvocation.MyCommand.ScriptBlock.Module

$script:ClassName = 'ROOT/StandardCimv2/MSFT_NetTransportFilter'
$script:ClassVersion = '1.0.0'
$script:ModuleVersion = '1.0.0'
$script:ObjectModelWrapper = [Microsoft.PowerShell.Cmdletization.Cim.CimCmdletAdapter]

$script:PrivateData = [System.Collections.Generic.Dictionary[string,string]]::new()

Microsoft.PowerShell.Core\Export-ModuleMember -Function @()
        

function __cmdletization_BindCommonParameters
{
    param(
        $__cmdletization_objectModelWrapper,
        $myPSBoundParameters
    )       
                

        if ($myPSBoundParameters.ContainsKey('CimSession')) { 
            $__cmdletization_objectModelWrapper.PSObject.Properties['CimSession'].Value = $myPSBoundParameters['CimSession'] 
        }
                    

        if ($myPSBoundParameters.ContainsKey('ThrottleLimit')) { 
            $__cmdletization_objectModelWrapper.PSObject.Properties['ThrottleLimit'].Value = $myPSBoundParameters['ThrottleLimit'] 
        }
                    

        if ($myPSBoundParameters.ContainsKey('AsJob')) { 
            $__cmdletization_objectModelWrapper.PSObject.Properties['AsJob'].Value = $myPSBoundParameters['AsJob'] 
        }
                    

}
                

function New-NetTransportFilter
{
    [CmdletBinding(SupportsShouldProcess=$true, ConfirmImpact='Medium', PositionalBinding=$false)]
    
    
    param(
    
    [Parameter(ParameterSetName='cim:CreateInstance0', Mandatory=$true)]
    [string]
    ${SettingName},

    [Parameter(ParameterSetName='cim:CreateInstance0')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetTransportFilter.Protocol]
    ${Protocol},

    [Parameter(ParameterSetName='cim:CreateInstance0')]
    [uint16]
    ${LocalPortStart},

    [Parameter(ParameterSetName='cim:CreateInstance0')]
    [uint16]
    ${LocalPortEnd},

    [Parameter(ParameterSetName='cim:CreateInstance0')]
    [uint16]
    ${RemotePortStart},

    [Parameter(ParameterSetName='cim:CreateInstance0')]
    [uint16]
    ${RemotePortEnd},

    [Parameter(ParameterSetName='cim:CreateInstance0')]
    [string]
    ${DestinationPrefix},

    [Parameter(ParameterSetName='cim:CreateInstance0')]
    [Alias('Session')]
    [ValidateNotNullOrEmpty()]
    [CimSession[]]
    ${CimSession},

    [Parameter(ParameterSetName='cim:CreateInstance0')]
    [int]
    ${ThrottleLimit},

    [Parameter(ParameterSetName='cim:CreateInstance0')]
    [switch]
    ${AsJob})

    DynamicParam {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper = $script:ObjectModelWrapper::new()
                $__cmdletization_objectModelWrapper.Initialize($PSCmdlet, $script:ClassName, $script:ClassVersion, $script:ModuleVersion, $script:PrivateData)

                if ($__cmdletization_objectModelWrapper -is [System.Management.Automation.IDynamicParameters])
                {
                    ([System.Management.Automation.IDynamicParameters]$__cmdletization_objectModelWrapper).GetDynamicParameters()
                }
            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }

    Begin {
        $__cmdletization_exceptionHasBeenThrown = $false
        try 
        {
            __cmdletization_BindCommonParameters $__cmdletization_objectModelWrapper $PSBoundParameters
            $__cmdletization_objectModelWrapper.BeginProcessing()
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    Process {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
      $__cmdletization_methodParameters = [System.Collections.Generic.List[Microsoft.PowerShell.Cmdletization.MethodParameter]]::new()

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('SettingName')) {
          [object]$__cmdletization_value = ${SettingName}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'SettingName'; ParameterType = 'System.String'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'SettingName'; ParameterType = 'System.String'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('Protocol')) {
          [object]$__cmdletization_value = ${Protocol}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'Protocol'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetTransportFilter.Protocol'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'Protocol'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetTransportFilter.Protocol'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('LocalPortStart')) {
          [object]$__cmdletization_value = ${LocalPortStart}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'LocalPortStart'; ParameterType = 'System.UInt16'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'LocalPortStart'; ParameterType = 'System.UInt16'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('LocalPortEnd')) {
          [object]$__cmdletization_value = ${LocalPortEnd}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'LocalPortEnd'; ParameterType = 'System.UInt16'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'LocalPortEnd'; ParameterType = 'System.UInt16'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('RemotePortStart')) {
          [object]$__cmdletization_value = ${RemotePortStart}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'RemotePortStart'; ParameterType = 'System.UInt16'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'RemotePortStart'; ParameterType = 'System.UInt16'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('RemotePortEnd')) {
          [object]$__cmdletization_value = ${RemotePortEnd}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'RemotePortEnd'; ParameterType = 'System.UInt16'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'RemotePortEnd'; ParameterType = 'System.UInt16'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('DestinationPrefix')) {
          [object]$__cmdletization_value = ${DestinationPrefix}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'DestinationPrefix'; ParameterType = 'System.String'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'DestinationPrefix'; ParameterType = 'System.String'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

      $__cmdletization_returnValue = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{ Name = 'ReturnValue'; ParameterType = 'System.Int32'; Bindings = 'Error'; Value = $null; IsValuePresent = $false }
      $__cmdletization_methodInvocationInfo = [Microsoft.PowerShell.Cmdletization.MethodInvocationInfo]::new('cim:CreateInstance', $__cmdletization_methodParameters, $__cmdletization_returnValue)
      $__cmdletization_objectModelWrapper.ProcessRecord($__cmdletization_methodInvocationInfo)

            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    End {
        try
        {
            if (-not $__cmdletization_exceptionHasBeen

ScriptBlock ID: e63c1a8e-2e97-428c-8daf-a99bc08e055d
Path:
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137845
Keywords=None
Message=Completed invocation of ScriptBlock ID: 404550ef-3624-4e1e-a7be-7b91139e4d27
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137844
Keywords=None
Message=Started invocation of ScriptBlock ID: 404550ef-3624-4e1e-a7be-7b91139e4d27
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=3
Type=Warning
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2137843
Keywords=None
Message=Creating Scriptblock text (4 of 4):
_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('ScalingHeuristics')) {
            [object]$__cmdletization_value = ${ScalingHeuristics}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'ScalingHeuristics'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetTCPSetting.ScalingHeuristics'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'ScalingHeuristics'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetTCPSetting.ScalingHeuristics'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('DynamicPortRangeStartPort')) {
            [object]$__cmdletization_value = ${DynamicPortRangeStartPort}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'DynamicPortRangeStartPort'; ParameterType = 'System.UInt16'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'DynamicPortRangeStartPort'; ParameterType = 'System.UInt16'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('DynamicPortRangeNumberOfPorts')) {
            [object]$__cmdletization_value = ${DynamicPortRangeNumberOfPorts}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'DynamicPortRangeNumberOfPorts'; ParameterType = 'System.UInt16'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'DynamicPortRangeNumberOfPorts'; ParameterType = 'System.UInt16'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('AutomaticUseCustom')) {
            [object]$__cmdletization_value = ${AutomaticUseCustom}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'AutomaticUseCustom'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetTCPSetting.AutomaticUseCustom'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'AutomaticUseCustom'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetTCPSetting.AutomaticUseCustom'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('NonSackRttResiliency')) {
            [object]$__cmdletization_value = ${NonSackRttResiliency}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'NonSackRttResiliency'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetTCPSetting.NonSackRttResiliency'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'NonSackRttResiliency'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetTCPSetting.NonSackRttResiliency'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('ForceWS')) {
            [object]$__cmdletization_value = ${ForceWS}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'ForceWS'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetTCPSetting.ForceWS'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'ForceWS'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetTCPSetting.ForceWS'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('MaxSynRetransmissions')) {
            [object]$__cmdletization_value = ${MaxSynRetransmissions}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'MaxSynRetransmissions'; ParameterType = 'System.Byte'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'MaxSynRetransmissions'; ParameterType = 'System.Byte'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('AutoReusePortRangeStartPort')) {
            [object]$__cmdletization_value = ${AutoReusePortRangeStartPort}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'AutoReusePortRangeStartPort'; ParameterType = 'System.UInt16'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'AutoReusePortRangeStartPort'; ParameterType = 'System.UInt16'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('AutoReusePortRangeNumberOfPorts')) {
            [object]$__cmdletization_value = ${AutoReusePortRangeNumberOfPorts}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'AutoReusePortRangeNumberOfPorts'; ParameterType = 'System.UInt16'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'AutoReusePortRangeNumberOfPorts'; ParameterType = 'System.UInt16'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

      $__cmdletization_returnValue = $null
      $__cmdletization_methodInvocationInfo = [Microsoft.PowerShell.Cmdletization.MethodInvocationInfo]::new('cim:ModifyInstance', $__cmdletization_methodParameters, $__cmdletization_returnValue)
      $__cmdletization_passThru = $PSBoundParameters.ContainsKey('PassThru') -and $PassThru
            if ($PSBoundParameters.ContainsKey('InputObject')) {
                foreach ($x in $InputObject) { $__cmdletization_objectModelWrapper.ProcessRecord($x, $__cmdletization_methodInvocationInfo, $__cmdletization_PassThru) }
            } else {
                $__cmdletization_objectModelWrapper.ProcessRecord($__cmdletization_queryBuilder, $__cmdletization_methodInvocationInfo, $__cmdletization_PassThru)
            }
        }
    }

            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    End {
        try
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper.EndProcessing()
            }
        }
        catch
        {
            throw
        }
    }

    # .EXTERNALHELP MSFT_NetTCPSetting.cdxml-Help.xml
}
Microsoft.PowerShell.Core\Export-ModuleMember -Function 'Set-NetTCPSetting' -Alias '*'
        


ScriptBlock ID: 404550ef-3624-4e1e-a7be-7b91139e4d27
Path:
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=3
Type=Warning
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2137842
Keywords=None
Message=Creating Scriptblock text (3 of 4):
     {
    $__cmdletization_queryBuilder = $__cmdletization_objectModelWrapper.GetQueryBuilder()
    if ($PSBoundParameters.ContainsKey('SettingName') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${SettingName})
        $__cmdletization_queryBuilder.FilterByProperty('SettingName', $__cmdletization_values, $true, 'Default')
    }


    $__cmdletization_methodParameters = [System.Collections.Generic.List[Microsoft.PowerShell.Cmdletization.MethodParameter]]::new()
    switch -exact ($PSCmdlet.ParameterSetName) { 
        { @('ByName', 'InputObject (cdxml)') -contains $_ } {
          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('MinRtoMs')) {
            [object]$__cmdletization_value = ${MinRtoMs}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'MinRto'; ParameterType = 'System.UInt32'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'MinRto'; ParameterType = 'System.UInt32'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('InitialCongestionWindowMss')) {
            [object]$__cmdletization_value = ${InitialCongestionWindowMss}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'InitialCongestionWindow'; ParameterType = 'System.UInt32'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'InitialCongestionWindow'; ParameterType = 'System.UInt32'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('CongestionProvider')) {
            [object]$__cmdletization_value = ${CongestionProvider}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'CongestionProvider'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetTCPSetting.CongestionProvider'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'CongestionProvider'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetTCPSetting.CongestionProvider'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('CwndRestart')) {
            [object]$__cmdletization_value = ${CwndRestart}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'CwndRestart'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetTCPSetting.CwndRestart'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'CwndRestart'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetTCPSetting.CwndRestart'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('DelayedAckTimeoutMs')) {
            [object]$__cmdletization_value = ${DelayedAckTimeoutMs}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'DelayedAckTimeout'; ParameterType = 'System.UInt32'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'DelayedAckTimeout'; ParameterType = 'System.UInt32'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('DelayedAckFrequency')) {
            [object]$__cmdletization_value = ${DelayedAckFrequency}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'DelayedAckFrequency'; ParameterType = 'System.Byte'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'DelayedAckFrequency'; ParameterType = 'System.Byte'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('MemoryPressureProtection')) {
            [object]$__cmdletization_value = ${MemoryPressureProtection}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'MemoryPressureProtection'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetTCPSetting.MemoryPressureProtection'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'MemoryPressureProtection'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetTCPSetting.MemoryPressureProtection'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('AutoTuningLevelLocal')) {
            [object]$__cmdletization_value = ${AutoTuningLevelLocal}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'AutoTuningLevelLocal'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetTCPSetting.AutoTuningLevelLocal'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'AutoTuningLevelLocal'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetTCPSetting.AutoTuningLevelLocal'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('EcnCapability')) {
            [object]$__cmdletization_value = ${EcnCapability}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'EcnCapability'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetTCPSetting.EcnCapability'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'EcnCapability'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetTCPSetting.EcnCapability'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('Timestamps')) {
            [object]$__cmdletization_value = ${Timestamps}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'Timestamps'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetTCPSetting.Timestamps'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'Timestamps'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetTCPSetting.Timestamps'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('InitialRtoMs')) {
            [object]$__cmdletization_value = ${InitialRtoMs}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'InitialRto'; ParameterType = 'System.UInt32'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'InitialRto'; ParameterType = 'System.UInt32'; Bindings = 'In'; Value = $__cmdletization

ScriptBlock ID: 404550ef-3624-4e1e-a7be-7b91139e4d27
Path:
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=3
Type=Warning
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2137841
Keywords=None
Message=Creating Scriptblock text (2 of 4):
__cmdletization_queryBuilder.FilterByProperty('EcnCapability', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('Timestamps') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${Timestamps})
        $__cmdletization_queryBuilder.FilterByProperty('Timestamps', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('InitialRtoMs') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${InitialRtoMs})
        $__cmdletization_queryBuilder.FilterByProperty('InitialRto', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('ScalingHeuristics') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${ScalingHeuristics})
        $__cmdletization_queryBuilder.FilterByProperty('ScalingHeuristics', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('DynamicPortRangeStartPort') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${DynamicPortRangeStartPort})
        $__cmdletization_queryBuilder.FilterByProperty('DynamicPortRangeStartPort', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('DynamicPortRangeNumberOfPorts') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${DynamicPortRangeNumberOfPorts})
        $__cmdletization_queryBuilder.FilterByProperty('DynamicPortRangeNumberOfPorts', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('AutomaticUseCustom') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${AutomaticUseCustom})
        $__cmdletization_queryBuilder.FilterByProperty('AutomaticUseCustom', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('NonSackRttResiliency') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${NonSackRttResiliency})
        $__cmdletization_queryBuilder.FilterByProperty('NonSackRttResiliency', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('ForceWS') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${ForceWS})
        $__cmdletization_queryBuilder.FilterByProperty('ForceWS', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('MaxSynRetransmissions') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${MaxSynRetransmissions})
        $__cmdletization_queryBuilder.FilterByProperty('MaxSynRetransmissions', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('AutoReusePortRangeStartPort') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${AutoReusePortRangeStartPort})
        $__cmdletization_queryBuilder.FilterByProperty('AutoReusePortRangeStartPort', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('AutoReusePortRangeNumberOfPorts') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${AutoReusePortRangeNumberOfPorts})
        $__cmdletization_queryBuilder.FilterByProperty('AutoReusePortRangeNumberOfPorts', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('AssociatedTransportFilter') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
    $__cmdletization_queryBuilder.FilterByAssociatedInstance(${AssociatedTransportFilter}, 'MSFT_NetTransportFilterTCPSetting', 'Antecedent', 'Dependent', 'Default')
    }


    $__cmdletization_objectModelWrapper.ProcessRecord($__cmdletization_queryBuilder)
            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    End {
        try
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper.EndProcessing()
            }
        }
        catch
        {
            throw
        }
    }

    # .EXTERNALHELP MSFT_NetTCPSetting.cdxml-Help.xml
}
Microsoft.PowerShell.Core\Export-ModuleMember -Function 'Get-NetTCPSetting' -Alias '*'
        

function Set-NetTCPSetting
{
    [CmdletBinding(DefaultParameterSetName='ByName', SupportsShouldProcess=$true, ConfirmImpact='Medium', PositionalBinding=$false)]
    
    [OutputType([Microsoft.Management.Infrastructure.CimInstance])]
[OutputType('Microsoft.Management.Infrastructure.CimInstance#ROOT/StandardCimv2/MSFT_NetTCPSetting')]

    param(
    
    [Parameter(ParameterSetName='ByName', Position=0)]
    [ValidateNotNull()]
    [string[]]
    ${SettingName},

    [Parameter(ParameterSetName='InputObject (cdxml)', Mandatory=$true, ValueFromPipeline=$true)]
    [PSTypeName('Microsoft.Management.Infrastructure.CimInstance#MSFT_NetTCPSetting')]
    [ValidateNotNull()]
    [ciminstance[]]
    ${InputObject},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Alias('MinRto')]
    [uint32]
    ${MinRtoMs},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Alias('InitialCongestionWindow')]
    [uint32]
    ${InitialCongestionWindowMss},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetTCPSetting.CongestionProvider]
    ${CongestionProvider},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetTCPSetting.CwndRestart]
    ${CwndRestart},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Alias('DelayedAckTimeout')]
    [uint32]
    ${DelayedAckTimeoutMs},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [byte]
    ${DelayedAckFrequency},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetTCPSetting.MemoryPressureProtection]
    ${MemoryPressureProtection},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetTCPSetting.AutoTuningLevelLocal]
    ${AutoTuningLevelLocal},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetTCPSetting.EcnCapability]
    ${EcnCapability},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetTCPSetting.Timestamps]
    ${Timestamps},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Alias('InitialRto')]
    [uint32]
    ${InitialRtoMs},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetTCPSetting.ScalingHeuristics]
    ${ScalingHeuristics},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [uint16]
    ${DynamicPortRangeStartPort},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [uint16]
    ${DynamicPortRangeNumberOfPorts},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetTCPSetting.AutomaticUseCustom]
    ${AutomaticUseCustom},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetTCPSetting.NonSackRttResiliency]
    ${NonSackRttResiliency},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetTCPSetting.ForceWS]
    ${ForceWS},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [byte]
    ${MaxSynRetransmissions},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [uint16]
    ${AutoReusePortRangeStartPort},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [uint16]
    ${AutoReusePortRangeNumberOfPorts},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Alias('Session')]
    [ValidateNotNullOrEmpty()]
    [CimSession[]]
    ${CimSession},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [int]
    ${ThrottleLimit},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [switch]
    ${AsJob},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [switch]
    ${PassThru})

    DynamicParam {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper = $script:ObjectModelWrapper::new()
                $__cmdletization_objectModelWrapper.Initialize($PSCmdlet, $script:ClassName, $script:ClassVersion, $script:ModuleVersion, $script:PrivateData)

                if ($__cmdletization_objectModelWrapper -is [System.Management.Automation.IDynamicParameters])
                {
                    ([System.Management.Automation.IDynamicParameters]$__cmdletization_objectModelWrapper).GetDynamicParameters()
                }
            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }

    Begin {
        $__cmdletization_exceptionHasBeenThrown = $false
        try 
        {
            __cmdletization_BindCommonParameters $__cmdletization_objectModelWrapper $PSBoundParameters
            $__cmdletization_objectModelWrapper.BeginProcessing()
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    Process {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
       

ScriptBlock ID: 404550ef-3624-4e1e-a7be-7b91139e4d27
Path:
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=3
Type=Warning
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2137840
Keywords=None
Message=Creating Scriptblock text (1 of 4):

#requires -version 3.0

try { Microsoft.PowerShell.Core\Set-StrictMode -Off } catch { }

$script:MyModule = $MyInvocation.MyCommand.ScriptBlock.Module

$script:ClassName = 'ROOT/StandardCimv2/MSFT_NetTCPSetting'
$script:ClassVersion = '1.0.0'
$script:ModuleVersion = '1.0.0'
$script:ObjectModelWrapper = [Microsoft.PowerShell.Cmdletization.Cim.CimCmdletAdapter]

$script:PrivateData = [System.Collections.Generic.Dictionary[string,string]]::new()

Microsoft.PowerShell.Core\Export-ModuleMember -Function @()
        

function __cmdletization_BindCommonParameters
{
    param(
        $__cmdletization_objectModelWrapper,
        $myPSBoundParameters
    )       
                

        if ($myPSBoundParameters.ContainsKey('CimSession')) { 
            $__cmdletization_objectModelWrapper.PSObject.Properties['CimSession'].Value = $myPSBoundParameters['CimSession'] 
        }
                    

        if ($myPSBoundParameters.ContainsKey('ThrottleLimit')) { 
            $__cmdletization_objectModelWrapper.PSObject.Properties['ThrottleLimit'].Value = $myPSBoundParameters['ThrottleLimit'] 
        }
                    

        if ($myPSBoundParameters.ContainsKey('AsJob')) { 
            $__cmdletization_objectModelWrapper.PSObject.Properties['AsJob'].Value = $myPSBoundParameters['AsJob'] 
        }
                    

}
                

function Get-NetTCPSetting
{
    [CmdletBinding(DefaultParameterSetName='ByName', PositionalBinding=$false)]
    
    [OutputType([Microsoft.Management.Infrastructure.CimInstance])]
[OutputType('Microsoft.Management.Infrastructure.CimInstance#ROOT/StandardCimv2/MSFT_NetTCPSetting')]

    param(
    
    [Parameter(ParameterSetName='ByName', Position=0)]
    [ValidateNotNull()]
    [string[]]
    ${SettingName},

    [Parameter(ParameterSetName='ByName')]
    [Alias('MinRto')]
    [ValidateNotNull()]
    [uint32[]]
    ${MinRtoMs},

    [Parameter(ParameterSetName='ByName')]
    [Alias('InitialCongestionWindow')]
    [ValidateNotNull()]
    [uint32[]]
    ${InitialCongestionWindowMss},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetTCPSetting.CongestionProvider[]]
    ${CongestionProvider},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetTCPSetting.CwndRestart[]]
    ${CwndRestart},

    [Parameter(ParameterSetName='ByName')]
    [Alias('DelayedAckTimeout')]
    [ValidateNotNull()]
    [uint32[]]
    ${DelayedAckTimeoutMs},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [byte[]]
    ${DelayedAckFrequency},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetTCPSetting.MemoryPressureProtection[]]
    ${MemoryPressureProtection},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetTCPSetting.AutoTuningLevelLocal[]]
    ${AutoTuningLevelLocal},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetTCPSetting.AutoTuningLevelGroupPolicy[]]
    ${AutoTuningLevelGroupPolicy},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetTCPSetting.AutoTuningLevelEffective[]]
    ${AutoTuningLevelEffective},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetTCPSetting.EcnCapability[]]
    ${EcnCapability},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetTCPSetting.Timestamps[]]
    ${Timestamps},

    [Parameter(ParameterSetName='ByName')]
    [Alias('InitialRto')]
    [ValidateNotNull()]
    [uint32[]]
    ${InitialRtoMs},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetTCPSetting.ScalingHeuristics[]]
    ${ScalingHeuristics},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [uint16[]]
    ${DynamicPortRangeStartPort},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [uint16[]]
    ${DynamicPortRangeNumberOfPorts},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetTCPSetting.AutomaticUseCustom[]]
    ${AutomaticUseCustom},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetTCPSetting.NonSackRttResiliency[]]
    ${NonSackRttResiliency},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetTCPSetting.ForceWS[]]
    ${ForceWS},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [byte[]]
    ${MaxSynRetransmissions},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [uint16[]]
    ${AutoReusePortRangeStartPort},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [uint16[]]
    ${AutoReusePortRangeNumberOfPorts},

    [Parameter(ParameterSetName='ByName', ValueFromPipeline=$true)]
    [PSTypeName('Microsoft.Management.Infrastructure.CimInstance#root/standardcimv2/MSFT_NetTransportFilter')]
    [ValidateNotNull()]
    [ciminstance]
    ${AssociatedTransportFilter},

    [Parameter(ParameterSetName='ByName')]
    [Alias('Session')]
    [ValidateNotNullOrEmpty()]
    [CimSession[]]
    ${CimSession},

    [Parameter(ParameterSetName='ByName')]
    [int]
    ${ThrottleLimit},

    [Parameter(ParameterSetName='ByName')]
    [switch]
    ${AsJob})

    DynamicParam {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper = $script:ObjectModelWrapper::new()
                $__cmdletization_objectModelWrapper.Initialize($PSCmdlet, $script:ClassName, $script:ClassVersion, $script:ModuleVersion, $script:PrivateData)

                if ($__cmdletization_objectModelWrapper -is [System.Management.Automation.IDynamicParameters])
                {
                    ([System.Management.Automation.IDynamicParameters]$__cmdletization_objectModelWrapper).GetDynamicParameters()
                }
            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }

    Begin {
        $__cmdletization_exceptionHasBeenThrown = $false
        try 
        {
            __cmdletization_BindCommonParameters $__cmdletization_objectModelWrapper $PSBoundParameters
            $__cmdletization_objectModelWrapper.BeginProcessing()
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    Process {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
    $__cmdletization_queryBuilder = $__cmdletization_objectModelWrapper.GetQueryBuilder()
    if ($PSBoundParameters.ContainsKey('SettingName') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${SettingName})
        $__cmdletization_queryBuilder.FilterByProperty('SettingName', $__cmdletization_values, $true, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('MinRtoMs') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${MinRtoMs})
        $__cmdletization_queryBuilder.FilterByProperty('MinRto', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('InitialCongestionWindowMss') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${InitialCongestionWindowMss})
        $__cmdletization_queryBuilder.FilterByProperty('InitialCongestionWindow', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('CongestionProvider') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${CongestionProvider})
        $__cmdletization_queryBuilder.FilterByProperty('CongestionProvider', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('CwndRestart') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${CwndRestart})
        $__cmdletization_queryBuilder.FilterByProperty('CwndRestart', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('DelayedAckTimeoutMs') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${DelayedAckTimeoutMs})
        $__cmdletization_queryBuilder.FilterByProperty('DelayedAckTimeout', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('DelayedAckFrequency') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${DelayedAckFrequency})
        $__cmdletization_queryBuilder.FilterByProperty('DelayedAckFrequency', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('MemoryPressureProtection') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${MemoryPressureProtection})
        $__cmdletization_queryBuilder.FilterByProperty('MemoryPressureProtection', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('AutoTuningLevelLocal') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${AutoTuningLevelLocal})
        $__cmdletization_queryBuilder.FilterByProperty('AutoTuningLevelLocal', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('AutoTuningLevelGroupPolicy') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${AutoTuningLevelGroupPolicy})
        $__cmdletization_queryBuilder.FilterByProperty('AutoTuningLevelGroupPolicy', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('AutoTuningLevelEffective') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${AutoTuningLevelEffective})
        $__cmdletization_queryBuilder.FilterByProperty('AutoTuningLevelEffective', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('EcnCapability') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${EcnCapability})
        $

ScriptBlock ID: 404550ef-3624-4e1e-a7be-7b91139e4d27
Path:
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137839
Keywords=None
Message=Completed invocation of ScriptBlock ID: 270b47d4-ca0c-48e6-bae0-8a998722b711
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137838
Keywords=None
Message=Started invocation of ScriptBlock ID: 270b47d4-ca0c-48e6-bae0-8a998722b711
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=3
Type=Warning
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2137837
Keywords=None
Message=Creating Scriptblock text (1 of 1):

#requires -version 3.0

try { Microsoft.PowerShell.Core\Set-StrictMode -Off } catch { }

$script:MyModule = $MyInvocation.MyCommand.ScriptBlock.Module

$script:ClassName = 'ROOT/StandardCimv2/MSFT_NetTCPConnection'
$script:ClassVersion = '1.0.0'
$script:ModuleVersion = '1.0.0'
$script:ObjectModelWrapper = [Microsoft.PowerShell.Cmdletization.Cim.CimCmdletAdapter]

$script:PrivateData = [System.Collections.Generic.Dictionary[string,string]]::new()

Microsoft.PowerShell.Core\Export-ModuleMember -Function @()
        

function __cmdletization_BindCommonParameters
{
    param(
        $__cmdletization_objectModelWrapper,
        $myPSBoundParameters
    )       
                

        if ($myPSBoundParameters.ContainsKey('CimSession')) { 
            $__cmdletization_objectModelWrapper.PSObject.Properties['CimSession'].Value = $myPSBoundParameters['CimSession'] 
        }
                    

        if ($myPSBoundParameters.ContainsKey('ThrottleLimit')) { 
            $__cmdletization_objectModelWrapper.PSObject.Properties['ThrottleLimit'].Value = $myPSBoundParameters['ThrottleLimit'] 
        }
                    

        if ($myPSBoundParameters.ContainsKey('AsJob')) { 
            $__cmdletization_objectModelWrapper.PSObject.Properties['AsJob'].Value = $myPSBoundParameters['AsJob'] 
        }
                    

}
                

function Get-NetTCPConnection
{
    [CmdletBinding(DefaultParameterSetName='ByName', PositionalBinding=$false)]
    
    [OutputType([Microsoft.Management.Infrastructure.CimInstance])]
[OutputType('Microsoft.Management.Infrastructure.CimInstance#ROOT/StandardCimv2/MSFT_NetTCPConnection')]

    param(
    
    [Parameter(ParameterSetName='ByName', Position=0, ValueFromPipelineByPropertyName=$true)]
    [Alias('IPAddress')]
    [ValidateNotNull()]
    [string[]]
    ${LocalAddress},

    [Parameter(ParameterSetName='ByName', Position=1)]
    [ValidateNotNull()]
    [uint16[]]
    ${LocalPort},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [string[]]
    ${RemoteAddress},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [uint16[]]
    ${RemotePort},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetTCPConnection.State[]]
    ${State},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetTCPConnection.AppliedSetting[]]
    ${AppliedSetting},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [uint32[]]
    ${OwningProcess},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [datetime[]]
    ${CreationTime},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetTCPConnection.OffloadState[]]
    ${OffloadState},

    [Parameter(ParameterSetName='ByName')]
    [Alias('Session')]
    [ValidateNotNullOrEmpty()]
    [CimSession[]]
    ${CimSession},

    [Parameter(ParameterSetName='ByName')]
    [int]
    ${ThrottleLimit},

    [Parameter(ParameterSetName='ByName')]
    [switch]
    ${AsJob})

    DynamicParam {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper = $script:ObjectModelWrapper::new()
                $__cmdletization_objectModelWrapper.Initialize($PSCmdlet, $script:ClassName, $script:ClassVersion, $script:ModuleVersion, $script:PrivateData)

                if ($__cmdletization_objectModelWrapper -is [System.Management.Automation.IDynamicParameters])
                {
                    ([System.Management.Automation.IDynamicParameters]$__cmdletization_objectModelWrapper).GetDynamicParameters()
                }
            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }

    Begin {
        $__cmdletization_exceptionHasBeenThrown = $false
        try 
        {
            __cmdletization_BindCommonParameters $__cmdletization_objectModelWrapper $PSBoundParameters
            $__cmdletization_objectModelWrapper.BeginProcessing()
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    Process {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
    $__cmdletization_queryBuilder = $__cmdletization_objectModelWrapper.GetQueryBuilder()
    if ($PSBoundParameters.ContainsKey('LocalAddress') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${LocalAddress})
        $__cmdletization_queryBuilder.FilterByProperty('LocalAddress', $__cmdletization_values, $true, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('LocalPort') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${LocalPort})
        $__cmdletization_queryBuilder.FilterByProperty('LocalPort', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('RemoteAddress') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${RemoteAddress})
        $__cmdletization_queryBuilder.FilterByProperty('RemoteAddress', $__cmdletization_values, $true, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('RemotePort') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${RemotePort})
        $__cmdletization_queryBuilder.FilterByProperty('RemotePort', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('State') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${State})
        $__cmdletization_queryBuilder.FilterByProperty('State', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('AppliedSetting') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${AppliedSetting})
        $__cmdletization_queryBuilder.FilterByProperty('AppliedSetting', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('OwningProcess') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${OwningProcess})
        $__cmdletization_queryBuilder.FilterByProperty('OwningProcess', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('CreationTime') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${CreationTime})
        $__cmdletization_queryBuilder.FilterByProperty('CreationTime', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('OffloadState') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${OffloadState})
        $__cmdletization_queryBuilder.FilterByProperty('OffloadState', $__cmdletization_values, $false, 'Default')
    }


    $__cmdletization_objectModelWrapper.ProcessRecord($__cmdletization_queryBuilder)
            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    End {
        try
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper.EndProcessing()
            }
        }
        catch
        {
            throw
        }
    }

    # .EXTERNALHELP MSFT_NetTCPConnection.cdxml-Help.xml
}
Microsoft.PowerShell.Core\Export-ModuleMember -Function 'Get-NetTCPConnection' -Alias '*'
        


ScriptBlock ID: 270b47d4-ca0c-48e6-bae0-8a998722b711
Path:
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137836
Keywords=None
Message=Completed invocation of ScriptBlock ID: 0e2d5da3-45f8-4b77-b474-ec9a0b736752
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137835
Keywords=None
Message=Started invocation of ScriptBlock ID: 0e2d5da3-45f8-4b77-b474-ec9a0b736752
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=3
Type=Warning
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2137834
Keywords=None
Message=Creating Scriptblock text (4 of 4):

    }
        

    Process {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
    $__cmdletization_queryBuilder = $__cmdletization_objectModelWrapper.GetQueryBuilder()
    if ($PSBoundParameters.ContainsKey('DestinationPrefix') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${DestinationPrefix})
        $__cmdletization_queryBuilder.FilterByProperty('DestinationPrefix', $__cmdletization_values, $true, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('InterfaceIndex') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${InterfaceIndex})
        $__cmdletization_queryBuilder.FilterByProperty('InterfaceIndex', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('InterfaceAlias') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${InterfaceAlias})
        $__cmdletization_queryBuilder.FilterByProperty('InterfaceAlias', $__cmdletization_values, $true, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('NextHop') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${NextHop})
        $__cmdletization_queryBuilder.FilterByProperty('NextHop', $__cmdletization_values, $true, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('AddressFamily') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${AddressFamily})
        $__cmdletization_queryBuilder.FilterByProperty('AddressFamily', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('Publish') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${Publish})
        $__cmdletization_queryBuilder.FilterByProperty('Publish', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('RouteMetric') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${RouteMetric})
        $__cmdletization_queryBuilder.FilterByProperty('RouteMetric', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('Protocol') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${Protocol})
        $__cmdletization_queryBuilder.FilterByProperty('Protocol', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('CompartmentId') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${CompartmentId})
        $__cmdletization_queryBuilder.FilterByProperty('CompartmentId', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('ValidLifetime') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${ValidLifetime})
        $__cmdletization_queryBuilder.FilterByProperty('ValidLifetime', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('PreferredLifetime') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${PreferredLifetime})
        $__cmdletization_queryBuilder.FilterByProperty('PreferredLifetime', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('AssociatedIPInterface') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
    $__cmdletization_queryBuilder.FilterByAssociatedInstance(${AssociatedIPInterface}, 'MSFT_NetIPInterfaceRoute', 'Antecedent', 'Dependent', 'Default')
    }
    if ($PSBoundParameters.ContainsKey('PolicyStore') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
    $__cmdletization_queryBuilder.AddQueryOption('PolicyStore', ${PolicyStore})
    }
    if ($PSBoundParameters.ContainsKey('IncludeAllCompartments') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
    $__cmdletization_queryBuilder.AddQueryOption('IncludeAllCompartments', ${IncludeAllCompartments})
    }


    $__cmdletization_methodParameters = [System.Collections.Generic.List[Microsoft.PowerShell.Cmdletization.MethodParameter]]::new()
    switch -exact ($PSCmdlet.ParameterSetName) { 
        { @('ByName', 'InputObject (cdxml)') -contains $_ } {
      $__cmdletization_returnValue = $null
      $__cmdletization_methodInvocationInfo = [Microsoft.PowerShell.Cmdletization.MethodInvocationInfo]::new('cim:DeleteInstance', $__cmdletization_methodParameters, $__cmdletization_returnValue)
      $__cmdletization_passThru = $PSBoundParameters.ContainsKey('PassThru') -and $PassThru
            if ($PSBoundParameters.ContainsKey('InputObject')) {
                foreach ($x in $InputObject) { $__cmdletization_objectModelWrapper.ProcessRecord($x, $__cmdletization_methodInvocationInfo, $__cmdletization_PassThru) }
            } else {
                $__cmdletization_objectModelWrapper.ProcessRecord($__cmdletization_queryBuilder, $__cmdletization_methodInvocationInfo, $__cmdletization_PassThru)
            }
        }
    }

            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    End {
        try
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper.EndProcessing()
            }
        }
        catch
        {
            throw
        }
    }

    # .EXTERNALHELP MSFT_NetRoute.cdxml-Help.xml
}
Microsoft.PowerShell.Core\Export-ModuleMember -Function 'Remove-NetRoute' -Alias '*'
        


ScriptBlock ID: 0e2d5da3-45f8-4b77-b474-ec9a0b736752
Path:
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=3
Type=Warning
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2137833
Keywords=None
Message=Creating Scriptblock text (3 of 4):
y('Publish', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('RouteMetric') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${RouteMetric})
        $__cmdletization_queryBuilder.FilterByProperty('RouteMetric', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('Protocol') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${Protocol})
        $__cmdletization_queryBuilder.FilterByProperty('Protocol', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('CompartmentId') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${CompartmentId})
        $__cmdletization_queryBuilder.FilterByProperty('CompartmentId', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('ValidLifetime') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${ValidLifetime})
        $__cmdletization_queryBuilder.FilterByProperty('ValidLifetime', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('PreferredLifetime') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${PreferredLifetime})
        $__cmdletization_queryBuilder.FilterByProperty('PreferredLifetime', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('AssociatedIPInterface') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
    $__cmdletization_queryBuilder.FilterByAssociatedInstance(${AssociatedIPInterface}, 'MSFT_NetIPInterfaceRoute', 'Antecedent', 'Dependent', 'Default')
    }
    if ($PSBoundParameters.ContainsKey('PolicyStore') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
    $__cmdletization_queryBuilder.AddQueryOption('PolicyStore', ${PolicyStore})
    }
    if ($PSBoundParameters.ContainsKey('IncludeAllCompartments') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
    $__cmdletization_queryBuilder.AddQueryOption('IncludeAllCompartments', ${IncludeAllCompartments})
    }


    $__cmdletization_objectModelWrapper.ProcessRecord($__cmdletization_queryBuilder)
            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    End {
        try
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper.EndProcessing()
            }
        }
        catch
        {
            throw
        }
    }

    # .EXTERNALHELP MSFT_NetRoute.cdxml-Help.xml
}
Microsoft.PowerShell.Core\Export-ModuleMember -Function 'Get-NetRoute' -Alias '*'
        

function Set-NetRoute
{
    [CmdletBinding(DefaultParameterSetName='ByName', SupportsShouldProcess=$true, ConfirmImpact='Medium', PositionalBinding=$false)]
    
    [OutputType([Microsoft.Management.Infrastructure.CimInstance])]
[OutputType('Microsoft.Management.Infrastructure.CimInstance#ROOT/StandardCimv2/MSFT_NetRoute')]

    param(
    
    [Parameter(ParameterSetName='ByName', Position=0)]
    [ValidateNotNull()]
    [string[]]
    ${DestinationPrefix},

    [Parameter(ParameterSetName='ByName', ValueFromPipelineByPropertyName=$true)]
    [Alias('ifIndex')]
    [ValidateNotNull()]
    [uint32[]]
    ${InterfaceIndex},

    [Parameter(ParameterSetName='ByName', ValueFromPipelineByPropertyName=$true)]
    [Alias('ifAlias')]
    [ValidateNotNull()]
    [string[]]
    ${InterfaceAlias},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [string[]]
    ${NextHop},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetRoute.AddressFamily[]]
    ${AddressFamily},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetRoute.Protocol[]]
    ${Protocol},

    [Parameter(ParameterSetName='ByName')]
    [string]
    ${PolicyStore},

    [Parameter(ParameterSetName='ByName')]
    [switch]
    ${IncludeAllCompartments},

    [Parameter(ParameterSetName='InputObject (cdxml)', Mandatory=$true, ValueFromPipeline=$true)]
    [PSTypeName('Microsoft.Management.Infrastructure.CimInstance#MSFT_NetRoute')]
    [ValidateNotNull()]
    [ciminstance[]]
    ${InputObject},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetRoute.Publish]
    ${Publish},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [uint16]
    ${RouteMetric},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [timespan]
    ${ValidLifetime},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [timespan]
    ${PreferredLifetime},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Alias('Session')]
    [ValidateNotNullOrEmpty()]
    [CimSession[]]
    ${CimSession},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [int]
    ${ThrottleLimit},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [switch]
    ${AsJob},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [switch]
    ${PassThru})

    DynamicParam {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper = $script:ObjectModelWrapper::new()
                $__cmdletization_objectModelWrapper.Initialize($PSCmdlet, $script:ClassName, $script:ClassVersion, $script:ModuleVersion, $script:PrivateData)

                if ($__cmdletization_objectModelWrapper -is [System.Management.Automation.IDynamicParameters])
                {
                    ([System.Management.Automation.IDynamicParameters]$__cmdletization_objectModelWrapper).GetDynamicParameters()
                }
            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }

    Begin {
        $__cmdletization_exceptionHasBeenThrown = $false
        try 
        {
            __cmdletization_BindCommonParameters $__cmdletization_objectModelWrapper $PSBoundParameters
            $__cmdletization_objectModelWrapper.BeginProcessing()
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    Process {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
    $__cmdletization_queryBuilder = $__cmdletization_objectModelWrapper.GetQueryBuilder()
    if ($PSBoundParameters.ContainsKey('DestinationPrefix') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${DestinationPrefix})
        $__cmdletization_queryBuilder.FilterByProperty('DestinationPrefix', $__cmdletization_values, $true, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('InterfaceIndex') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${InterfaceIndex})
        $__cmdletization_queryBuilder.FilterByProperty('InterfaceIndex', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('InterfaceAlias') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${InterfaceAlias})
        $__cmdletization_queryBuilder.FilterByProperty('InterfaceAlias', $__cmdletization_values, $true, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('NextHop') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${NextHop})
        $__cmdletization_queryBuilder.FilterByProperty('NextHop', $__cmdletization_values, $true, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('AddressFamily') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${AddressFamily})
        $__cmdletization_queryBuilder.FilterByProperty('AddressFamily', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('Protocol') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${Protocol})
        $__cmdletization_queryBuilder.FilterByProperty('Protocol', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('PolicyStore') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
    $__cmdletization_queryBuilder.AddQueryOption('PolicyStore', ${PolicyStore})
    }
    if ($PSBoundParameters.ContainsKey('IncludeAllCompartments') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
    $__cmdletization_queryBuilder.AddQueryOption('IncludeAllCompartments', ${IncludeAllCompartments})
    }


    $__cmdletization_methodParameters = [System.Collections.Generic.List[Microsoft.PowerShell.Cmdletization.MethodParameter]]::new()
    switch -exact ($PSCmdlet.ParameterSetName) { 
        { @('ByName', 'InputObject (cdxml)') -contains $_ } {
          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('Publish')) {
            [object]$__cmdletization_value = ${Publish}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'Publish'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetRoute.Publish'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'Publish'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetRoute.Publish'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('RouteMetric')) {
            [object]$__cmdletization_value = ${RouteMetric}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'RouteMetric'; ParameterType = 'System.UInt16'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'RouteMetric'; ParameterType = 'System.UInt16'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('ValidLifetime')) {
            [object]$__cmdletization_value = ${ValidLifetime}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'ValidLifetime'; ParameterType = 'System.TimeSpan'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'ValidLifetime'; ParameterType = 'System.TimeSpan'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('PreferredLifetime')) {
            [object]$__cmdletization_value = ${PreferredLifetime}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'PreferredLifetime'; ParameterType = 'System.TimeSpan'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'PreferredLifetime'; ParameterType = 'System.TimeSpan'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

      $__cmdletization_returnValue = $null
      $__cmdletization_methodInvocationInfo = [Microsoft.PowerShell.Cmdletization.MethodInvocationInfo]::new('cim:ModifyInstance', $__cmdletization_methodParameters, $__cmdletization_returnValue)
      $__cmdletization_passThru = $PSBoundParameters.ContainsKey('PassThru') -and $PassThru
            if ($PSBoundParameters.ContainsKey('InputObject')) {
                foreach ($x in $InputObject) { $__cmdletization_objectModelWrapper.ProcessRecord($x, $__cmdletization_methodInvocationInfo, $__cmdletization_PassThru) }
            } else {
                $__cmdletization_objectModelWrapper.ProcessRecord($__cmdletization_queryBuilder, $__cmdletization_methodInvocationInfo, $__cmdletization_PassThru)
            }
        }
    }

            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    End {
        try
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper.EndProcessing()
            }
        }
        catch
        {
            throw
        }
    }

    # .EXTERNALHELP MSFT_NetRoute.cdxml-Help.xml
}
Microsoft.PowerShell.Core\Export-ModuleMember -Function 'Set-NetRoute' -Alias '*'
        

function Remove-NetRoute
{
    [CmdletBinding(DefaultParameterSetName='ByName', SupportsShouldProcess=$true, ConfirmImpact='High', PositionalBinding=$false)]
    
    [OutputType([Microsoft.Management.Infrastructure.CimInstance])]
[OutputType('Microsoft.Management.Infrastructure.CimInstance#ROOT/StandardCimv2/MSFT_NetRoute')]

    param(
    
    [Parameter(ParameterSetName='ByName', Position=0)]
    [ValidateNotNull()]
    [string[]]
    ${DestinationPrefix},

    [Parameter(ParameterSetName='ByName', ValueFromPipelineByPropertyName=$true)]
    [Alias('ifIndex')]
    [ValidateNotNull()]
    [uint32[]]
    ${InterfaceIndex},

    [Parameter(ParameterSetName='ByName', ValueFromPipelineByPropertyName=$true)]
    [Alias('ifAlias')]
    [ValidateNotNull()]
    [string[]]
    ${InterfaceAlias},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [string[]]
    ${NextHop},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetRoute.AddressFamily[]]
    ${AddressFamily},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetRoute.Publish[]]
    ${Publish},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [uint16[]]
    ${RouteMetric},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetRoute.Protocol[]]
    ${Protocol},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [uint32[]]
    ${CompartmentId},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [timespan[]]
    ${ValidLifetime},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [timespan[]]
    ${PreferredLifetime},

    [Parameter(ParameterSetName='ByName', ValueFromPipeline=$true)]
    [PSTypeName('Microsoft.Management.Infrastructure.CimInstance#root/standardcimv2/MSFT_NetIPInterface')]
    [ValidateNotNull()]
    [ciminstance]
    ${AssociatedIPInterface},

    [Parameter(ParameterSetName='ByName')]
    [string]
    ${PolicyStore},

    [Parameter(ParameterSetName='ByName')]
    [switch]
    ${IncludeAllCompartments},

    [Parameter(ParameterSetName='InputObject (cdxml)', Mandatory=$true, ValueFromPipeline=$true)]
    [PSTypeName('Microsoft.Management.Infrastructure.CimInstance#MSFT_NetRoute')]
    [ValidateNotNull()]
    [ciminstance[]]
    ${InputObject},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Alias('Session')]
    [ValidateNotNullOrEmpty()]
    [CimSession[]]
    ${CimSession},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [int]
    ${ThrottleLimit},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [switch]
    ${AsJob},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [switch]
    ${PassThru})

    DynamicParam {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper = $script:ObjectModelWrapper::new()
                $__cmdletization_objectModelWrapper.Initialize($PSCmdlet, $script:ClassName, $script:ClassVersion, $script:ModuleVersion, $script:PrivateData)

                if ($__cmdletization_objectModelWrapper -is [System.Management.Automation.IDynamicParameters])
                {
                    ([System.Management.Automation.IDynamicParameters]$__cmdletization_objectModelWrapper).GetDynamicParameters()
                }
            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }

    Begin {
        $__cmdletization_exceptionHasBeenThrown = $false
        try 
        {
            __cmdletization_BindCommonParameters $__cmdletization_objectModelWrapper $PSBoundParameters
            $__cmdletization_objectModelWrapper.BeginProcessing()
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }

ScriptBlock ID: 0e2d5da3-45f8-4b77-b474-ec9a0b736752
Path:
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=3
Type=Warning
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2137832
Keywords=None
Message=Creating Scriptblock text (2 of 4):
}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('PolicyStore')) {
          [object]$__cmdletization_value = ${PolicyStore}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'PolicyStore'; ParameterType = 'System.String'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'PolicyStore'; ParameterType = 'System.String'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('Publish')) {
          [object]$__cmdletization_value = ${Publish}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'Publish'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetRoute.Publish'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'Publish'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetRoute.Publish'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('RouteMetric')) {
          [object]$__cmdletization_value = ${RouteMetric}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'RouteMetric'; ParameterType = 'System.UInt16'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'RouteMetric'; ParameterType = 'System.UInt16'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('Protocol')) {
          [object]$__cmdletization_value = ${Protocol}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'Protocol'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetRoute.Protocol'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'Protocol'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetRoute.Protocol'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('ValidLifetime')) {
          [object]$__cmdletization_value = ${ValidLifetime}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'ValidLifetime'; ParameterType = 'System.TimeSpan'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'ValidLifetime'; ParameterType = 'System.TimeSpan'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('PreferredLifetime')) {
          [object]$__cmdletization_value = ${PreferredLifetime}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'PreferredLifetime'; ParameterType = 'System.TimeSpan'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'PreferredLifetime'; ParameterType = 'System.TimeSpan'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'CmdletOutput'; ParameterType = 'Microsoft.Management.Infrastructure.CimInstance[]'; Bindings = 'Out'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

      $__cmdletization_returnValue = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{ Name = 'ReturnValue'; ParameterType = 'System.UInt32'; Bindings = 'Error'; Value = $null; IsValuePresent = $false }
      $__cmdletization_methodInvocationInfo = [Microsoft.PowerShell.Cmdletization.MethodInvocationInfo]::new('Create', $__cmdletization_methodParameters, $__cmdletization_returnValue)
      $__cmdletization_objectModelWrapper.ProcessRecord($__cmdletization_methodInvocationInfo)
        }
    }

            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    End {
        try
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper.EndProcessing()
            }
        }
        catch
        {
            throw
        }
    }

    # .EXTERNALHELP MSFT_NetRoute.cdxml-Help.xml
}
Microsoft.PowerShell.Core\Export-ModuleMember -Function 'New-NetRoute' -Alias '*'
        

function Find-NetRoute
{
    [CmdletBinding(PositionalBinding=$false)]
    
    [OutputType([Microsoft.Management.Infrastructure.CimInstance[]])]
    param(
    
    [Parameter(ParameterSetName='Find0')]
    [uint32]
    ${InterfaceIndex},

    [Parameter(ParameterSetName='Find0')]
    [string]
    ${LocalIPAddress},

    [Parameter(ParameterSetName='Find0', Mandatory=$true)]
    [string]
    ${RemoteIPAddress},

    [Parameter(ParameterSetName='Find0')]
    [Alias('Session')]
    [ValidateNotNullOrEmpty()]
    [CimSession[]]
    ${CimSession},

    [Parameter(ParameterSetName='Find0')]
    [int]
    ${ThrottleLimit},

    [Parameter(ParameterSetName='Find0')]
    [switch]
    ${AsJob})

    DynamicParam {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper = $script:ObjectModelWrapper::new()
                $__cmdletization_objectModelWrapper.Initialize($PSCmdlet, $script:ClassName, $script:ClassVersion, $script:ModuleVersion, $script:PrivateData)

                if ($__cmdletization_objectModelWrapper -is [System.Management.Automation.IDynamicParameters])
                {
                    ([System.Management.Automation.IDynamicParameters]$__cmdletization_objectModelWrapper).GetDynamicParameters()
                }
            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }

    Begin {
        $__cmdletization_exceptionHasBeenThrown = $false
        try 
        {
            __cmdletization_BindCommonParameters $__cmdletization_objectModelWrapper $PSBoundParameters
            $__cmdletization_objectModelWrapper.BeginProcessing()
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    Process {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
      $__cmdletization_methodParameters = [System.Collections.Generic.List[Microsoft.PowerShell.Cmdletization.MethodParameter]]::new()

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('InterfaceIndex')) {
          [object]$__cmdletization_value = ${InterfaceIndex}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'InterfaceIndex'; ParameterType = 'System.UInt32'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'InterfaceIndex'; ParameterType = 'System.UInt32'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('LocalIPAddress')) {
          [object]$__cmdletization_value = ${LocalIPAddress}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'LocalIPAddress'; ParameterType = 'System.String'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'LocalIPAddress'; ParameterType = 'System.String'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('RemoteIPAddress')) {
          [object]$__cmdletization_value = ${RemoteIPAddress}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'RemoteIPAddress'; ParameterType = 'System.String'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'RemoteIPAddress'; ParameterType = 'System.String'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'CmdletOutput'; ParameterType = 'Microsoft.Management.Infrastructure.CimInstance[]'; Bindings = 'Out'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

      $__cmdletization_returnValue = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{ Name = 'ReturnValue'; ParameterType = 'System.UInt32'; Bindings = 'Error'; Value = $null; IsValuePresent = $false }
      $__cmdletization_methodInvocationInfo = [Microsoft.PowerShell.Cmdletization.MethodInvocationInfo]::new('Find', $__cmdletization_methodParameters, $__cmdletization_returnValue)
      $__cmdletization_objectModelWrapper.ProcessRecord($__cmdletization_methodInvocationInfo)

            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    End {
        try
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper.EndProcessing()
            }
        }
        catch
        {
            throw
        }
    }

    # .EXTERNALHELP MSFT_NetRoute.cdxml-Help.xml
}
Microsoft.PowerShell.Core\Export-ModuleMember -Function 'Find-NetRoute' -Alias '*'
        

function Get-NetRoute
{
    [CmdletBinding(DefaultParameterSetName='ByName', PositionalBinding=$false)]
    
    [OutputType([Microsoft.Management.Infrastructure.CimInstance])]
[OutputType('Microsoft.Management.Infrastructure.CimInstance#ROOT/StandardCimv2/MSFT_NetRoute')]

    param(
    
    [Parameter(ParameterSetName='ByName', Position=0)]
    [ValidateNotNull()]
    [string[]]
    ${DestinationPrefix},

    [Parameter(ParameterSetName='ByName', ValueFromPipelineByPropertyName=$true)]
    [Alias('ifIndex')]
    [ValidateNotNull()]
    [uint32[]]
    ${InterfaceIndex},

    [Parameter(ParameterSetName='ByName', ValueFromPipelineByPropertyName=$true)]
    [Alias('ifAlias')]
    [ValidateNotNull()]
    [string[]]
    ${InterfaceAlias},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [string[]]
    ${NextHop},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetRoute.AddressFamily[]]
    ${AddressFamily},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetRoute.Publish[]]
    ${Publish},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [uint16[]]
    ${RouteMetric},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetRoute.Protocol[]]
    ${Protocol},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [uint32[]]
    ${CompartmentId},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [timespan[]]
    ${ValidLifetime},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [timespan[]]
    ${PreferredLifetime},

    [Parameter(ParameterSetName='ByName', ValueFromPipeline=$true)]
    [PSTypeName('Microsoft.Management.Infrastructure.CimInstance#root/standardcimv2/MSFT_NetIPInterface')]
    [ValidateNotNull()]
    [ciminstance]
    ${AssociatedIPInterface},

    [Parameter(ParameterSetName='ByName')]
    [string]
    ${PolicyStore},

    [Parameter(ParameterSetName='ByName')]
    [switch]
    ${IncludeAllCompartments},

    [Parameter(ParameterSetName='ByName')]
    [Alias('Session')]
    [ValidateNotNullOrEmpty()]
    [CimSession[]]
    ${CimSession},

    [Parameter(ParameterSetName='ByName')]
    [int]
    ${ThrottleLimit},

    [Parameter(ParameterSetName='ByName')]
    [switch]
    ${AsJob})

    DynamicParam {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper = $script:ObjectModelWrapper::new()
                $__cmdletization_objectModelWrapper.Initialize($PSCmdlet, $script:ClassName, $script:ClassVersion, $script:ModuleVersion, $script:PrivateData)

                if ($__cmdletization_objectModelWrapper -is [System.Management.Automation.IDynamicParameters])
                {
                    ([System.Management.Automation.IDynamicParameters]$__cmdletization_objectModelWrapper).GetDynamicParameters()
                }
            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }

    Begin {
        $__cmdletization_exceptionHasBeenThrown = $false
        try 
        {
            __cmdletization_BindCommonParameters $__cmdletization_objectModelWrapper $PSBoundParameters
            $__cmdletization_objectModelWrapper.BeginProcessing()
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    Process {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
    $__cmdletization_queryBuilder = $__cmdletization_objectModelWrapper.GetQueryBuilder()
    if ($PSBoundParameters.ContainsKey('DestinationPrefix') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${DestinationPrefix})
        $__cmdletization_queryBuilder.FilterByProperty('DestinationPrefix', $__cmdletization_values, $true, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('InterfaceIndex') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${InterfaceIndex})
        $__cmdletization_queryBuilder.FilterByProperty('InterfaceIndex', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('InterfaceAlias') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${InterfaceAlias})
        $__cmdletization_queryBuilder.FilterByProperty('InterfaceAlias', $__cmdletization_values, $true, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('NextHop') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${NextHop})
        $__cmdletization_queryBuilder.FilterByProperty('NextHop', $__cmdletization_values, $true, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('AddressFamily') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${AddressFamily})
        $__cmdletization_queryBuilder.FilterByProperty('AddressFamily', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('Publish') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${Publish})
        $__cmdletization_queryBuilder.FilterByPropert

ScriptBlock ID: 0e2d5da3-45f8-4b77-b474-ec9a0b736752
Path:
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=3
Type=Warning
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2137831
Keywords=None
Message=Creating Scriptblock text (1 of 4):

#requires -version 3.0

try { Microsoft.PowerShell.Core\Set-StrictMode -Off } catch { }

$script:MyModule = $MyInvocation.MyCommand.ScriptBlock.Module

$script:ClassName = 'ROOT/StandardCimv2/MSFT_NetRoute'
$script:ClassVersion = '1.0.0'
$script:ModuleVersion = '1.0.0'
$script:ObjectModelWrapper = [Microsoft.PowerShell.Cmdletization.Cim.CimCmdletAdapter]

$script:PrivateData = [System.Collections.Generic.Dictionary[string,string]]::new()

Microsoft.PowerShell.Core\Export-ModuleMember -Function @()
        

function __cmdletization_BindCommonParameters
{
    param(
        $__cmdletization_objectModelWrapper,
        $myPSBoundParameters
    )       
                

        if ($myPSBoundParameters.ContainsKey('CimSession')) { 
            $__cmdletization_objectModelWrapper.PSObject.Properties['CimSession'].Value = $myPSBoundParameters['CimSession'] 
        }
                    

        if ($myPSBoundParameters.ContainsKey('ThrottleLimit')) { 
            $__cmdletization_objectModelWrapper.PSObject.Properties['ThrottleLimit'].Value = $myPSBoundParameters['ThrottleLimit'] 
        }
                    

        if ($myPSBoundParameters.ContainsKey('AsJob')) { 
            $__cmdletization_objectModelWrapper.PSObject.Properties['AsJob'].Value = $myPSBoundParameters['AsJob'] 
        }
                    

}
                

function New-NetRoute
{
    [CmdletBinding(DefaultParameterSetName='ByInterfaceAlias', SupportsShouldProcess=$true, ConfirmImpact='Medium', PositionalBinding=$false)]
    
    [OutputType([Microsoft.Management.Infrastructure.CimInstance[]])][OutputType([Microsoft.Management.Infrastructure.CimInstance[]])]
    param(
    
    [Parameter(ParameterSetName='ByInterfaceAlias', Mandatory=$true, Position=0)]
    [Parameter(ParameterSetName='ByInterfaceIndex', Mandatory=$true, Position=0)]
    [string]
    ${DestinationPrefix},

    [Parameter(ParameterSetName='ByInterfaceAlias', Mandatory=$true, ValueFromPipelineByPropertyName=$true)]
    [Alias('ifAlias')]
    [string]
    ${InterfaceAlias},

    [Parameter(ParameterSetName='ByInterfaceAlias')]
    [Parameter(ParameterSetName='ByInterfaceIndex')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetRoute.AddressFamily]
    ${AddressFamily},

    [Parameter(ParameterSetName='ByInterfaceAlias')]
    [Parameter(ParameterSetName='ByInterfaceIndex')]
    [string]
    ${NextHop},

    [Parameter(ParameterSetName='ByInterfaceAlias')]
    [Parameter(ParameterSetName='ByInterfaceIndex')]
    [string]
    ${PolicyStore},

    [Parameter(ParameterSetName='ByInterfaceAlias')]
    [Parameter(ParameterSetName='ByInterfaceIndex')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetRoute.Publish]
    ${Publish},

    [Parameter(ParameterSetName='ByInterfaceAlias')]
    [Parameter(ParameterSetName='ByInterfaceIndex')]
    [uint16]
    ${RouteMetric},

    [Parameter(ParameterSetName='ByInterfaceAlias')]
    [Parameter(ParameterSetName='ByInterfaceIndex')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetRoute.Protocol]
    ${Protocol},

    [Parameter(ParameterSetName='ByInterfaceAlias')]
    [Parameter(ParameterSetName='ByInterfaceIndex')]
    [timespan]
    ${ValidLifetime},

    [Parameter(ParameterSetName='ByInterfaceAlias')]
    [Parameter(ParameterSetName='ByInterfaceIndex')]
    [timespan]
    ${PreferredLifetime},

    [Parameter(ParameterSetName='ByInterfaceIndex', Mandatory=$true, ValueFromPipelineByPropertyName=$true)]
    [Alias('ifIndex')]
    [uint32]
    ${InterfaceIndex},

    [Parameter(ParameterSetName='ByInterfaceAlias')]
    [Parameter(ParameterSetName='ByInterfaceIndex')]
    [Alias('Session')]
    [ValidateNotNullOrEmpty()]
    [CimSession[]]
    ${CimSession},

    [Parameter(ParameterSetName='ByInterfaceAlias')]
    [Parameter(ParameterSetName='ByInterfaceIndex')]
    [int]
    ${ThrottleLimit},

    [Parameter(ParameterSetName='ByInterfaceAlias')]
    [Parameter(ParameterSetName='ByInterfaceIndex')]
    [switch]
    ${AsJob})

    DynamicParam {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper = $script:ObjectModelWrapper::new()
                $__cmdletization_objectModelWrapper.Initialize($PSCmdlet, $script:ClassName, $script:ClassVersion, $script:ModuleVersion, $script:PrivateData)

                if ($__cmdletization_objectModelWrapper -is [System.Management.Automation.IDynamicParameters])
                {
                    ([System.Management.Automation.IDynamicParameters]$__cmdletization_objectModelWrapper).GetDynamicParameters()
                }
            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }

    Begin {
        $__cmdletization_exceptionHasBeenThrown = $false
        try 
        {
            __cmdletization_BindCommonParameters $__cmdletization_objectModelWrapper $PSBoundParameters
            $__cmdletization_objectModelWrapper.BeginProcessing()
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    Process {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
      $__cmdletization_methodParameters = [System.Collections.Generic.List[Microsoft.PowerShell.Cmdletization.MethodParameter]]::new()

      switch -exact ($PSCmdlet.ParameterSetName) { 
        { @('ByInterfaceAlias') -contains $_ } {
        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('DestinationPrefix')) {
          [object]$__cmdletization_value = ${DestinationPrefix}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'DestinationPrefix'; ParameterType = 'System.String'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'DestinationPrefix'; ParameterType = 'System.String'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('InterfaceAlias')) {
          [object]$__cmdletization_value = ${InterfaceAlias}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'InterfaceAlias'; ParameterType = 'System.String'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'InterfaceAlias'; ParameterType = 'System.String'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('AddressFamily')) {
          [object]$__cmdletization_value = ${AddressFamily}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'AddressFamily'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetRoute.AddressFamily'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'AddressFamily'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetRoute.AddressFamily'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('NextHop')) {
          [object]$__cmdletization_value = ${NextHop}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'NextHop'; ParameterType = 'System.String'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'NextHop'; ParameterType = 'System.String'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('PolicyStore')) {
          [object]$__cmdletization_value = ${PolicyStore}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'PolicyStore'; ParameterType = 'System.String'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'PolicyStore'; ParameterType = 'System.String'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('Publish')) {
          [object]$__cmdletization_value = ${Publish}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'Publish'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetRoute.Publish'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'Publish'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetRoute.Publish'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('RouteMetric')) {
          [object]$__cmdletization_value = ${RouteMetric}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'RouteMetric'; ParameterType = 'System.UInt16'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'RouteMetric'; ParameterType = 'System.UInt16'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('Protocol')) {
          [object]$__cmdletization_value = ${Protocol}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'Protocol'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetRoute.Protocol'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'Protocol'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetRoute.Protocol'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('ValidLifetime')) {
          [object]$__cmdletization_value = ${ValidLifetime}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'ValidLifetime'; ParameterType = 'System.TimeSpan'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'ValidLifetime'; ParameterType = 'System.TimeSpan'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('PreferredLifetime')) {
          [object]$__cmdletization_value = ${PreferredLifetime}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'PreferredLifetime'; ParameterType = 'System.TimeSpan'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'PreferredLifetime'; ParameterType = 'System.TimeSpan'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'CmdletOutput'; ParameterType = 'Microsoft.Management.Infrastructure.CimInstance[]'; Bindings = 'Out'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

      $__cmdletization_returnValue = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{ Name = 'ReturnValue'; ParameterType = 'System.UInt32'; Bindings = 'Error'; Value = $null; IsValuePresent = $false }
      $__cmdletization_methodInvocationInfo = [Microsoft.PowerShell.Cmdletization.MethodInvocationInfo]::new('Create', $__cmdletization_methodParameters, $__cmdletization_returnValue)
      $__cmdletization_objectModelWrapper.ProcessRecord($__cmdletization_methodInvocationInfo)
        }
        { @('ByInterfaceIndex') -contains $_ } {
        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('DestinationPrefix')) {
          [object]$__cmdletization_value = ${DestinationPrefix}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'DestinationPrefix'; ParameterType = 'System.String'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'DestinationPrefix'; ParameterType = 'System.String'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('InterfaceIndex')) {
          [object]$__cmdletization_value = ${InterfaceIndex}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'InterfaceIndex'; ParameterType = 'System.UInt32'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'InterfaceIndex'; ParameterType = 'System.UInt32'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('AddressFamily')) {
          [object]$__cmdletization_value = ${AddressFamily}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'AddressFamily'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetRoute.AddressFamily'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'AddressFamily'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetRoute.AddressFamily'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('NextHop')) {
          [object]$__cmdletization_value = ${NextHop}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'NextHop'; ParameterType = 'System.String'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'NextHop'; ParameterType = 'System.String'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent

ScriptBlock ID: 0e2d5da3-45f8-4b77-b474-ec9a0b736752
Path:
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137830
Keywords=None
Message=Completed invocation of ScriptBlock ID: 8e9eb310-f064-4be1-89cb-d7644ed322b5
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137829
Keywords=None
Message=Started invocation of ScriptBlock ID: 8e9eb310-f064-4be1-89cb-d7644ed322b5
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=3
Type=Warning
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2137828
Keywords=None
Message=Creating Scriptblock text (1 of 1):

#requires -version 3.0

try { Microsoft.PowerShell.Core\Set-StrictMode -Off } catch { }

$script:MyModule = $MyInvocation.MyCommand.ScriptBlock.Module

$script:ClassName = 'ROOT/StandardCimv2/MSFT_NetPrefixPolicy'
$script:ClassVersion = '1.0.0'
$script:ModuleVersion = '1.0.0'
$script:ObjectModelWrapper = [Microsoft.PowerShell.Cmdletization.Cim.CimCmdletAdapter]

$script:PrivateData = [System.Collections.Generic.Dictionary[string,string]]::new()

Microsoft.PowerShell.Core\Export-ModuleMember -Function @()
        

function __cmdletization_BindCommonParameters
{
    param(
        $__cmdletization_objectModelWrapper,
        $myPSBoundParameters
    )       
                

        if ($myPSBoundParameters.ContainsKey('CimSession')) { 
            $__cmdletization_objectModelWrapper.PSObject.Properties['CimSession'].Value = $myPSBoundParameters['CimSession'] 
        }
                    

        if ($myPSBoundParameters.ContainsKey('ThrottleLimit')) { 
            $__cmdletization_objectModelWrapper.PSObject.Properties['ThrottleLimit'].Value = $myPSBoundParameters['ThrottleLimit'] 
        }
                    

        if ($myPSBoundParameters.ContainsKey('AsJob')) { 
            $__cmdletization_objectModelWrapper.PSObject.Properties['AsJob'].Value = $myPSBoundParameters['AsJob'] 
        }
                    

}
                

function Get-NetPrefixPolicy
{
    [CmdletBinding(DefaultParameterSetName='ByName', PositionalBinding=$false)]
    
    [OutputType([Microsoft.Management.Infrastructure.CimInstance])]
[OutputType('Microsoft.Management.Infrastructure.CimInstance#ROOT/StandardCimv2/MSFT_NetPrefixPolicy')]

    param(
    
    [Parameter(ParameterSetName='ByName', Position=0)]
    [ValidateNotNull()]
    [string[]]
    ${Prefix},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [uint32[]]
    ${Precedence},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [uint32[]]
    ${Label},

    [Parameter(ParameterSetName='ByName')]
    [Alias('Session')]
    [ValidateNotNullOrEmpty()]
    [CimSession[]]
    ${CimSession},

    [Parameter(ParameterSetName='ByName')]
    [int]
    ${ThrottleLimit},

    [Parameter(ParameterSetName='ByName')]
    [switch]
    ${AsJob})

    DynamicParam {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper = $script:ObjectModelWrapper::new()
                $__cmdletization_objectModelWrapper.Initialize($PSCmdlet, $script:ClassName, $script:ClassVersion, $script:ModuleVersion, $script:PrivateData)

                if ($__cmdletization_objectModelWrapper -is [System.Management.Automation.IDynamicParameters])
                {
                    ([System.Management.Automation.IDynamicParameters]$__cmdletization_objectModelWrapper).GetDynamicParameters()
                }
            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }

    Begin {
        $__cmdletization_exceptionHasBeenThrown = $false
        try 
        {
            __cmdletization_BindCommonParameters $__cmdletization_objectModelWrapper $PSBoundParameters
            $__cmdletization_objectModelWrapper.BeginProcessing()
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    Process {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
    $__cmdletization_queryBuilder = $__cmdletization_objectModelWrapper.GetQueryBuilder()
    if ($PSBoundParameters.ContainsKey('Prefix') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${Prefix})
        $__cmdletization_queryBuilder.FilterByProperty('Prefix', $__cmdletization_values, $true, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('Precedence') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${Precedence})
        $__cmdletization_queryBuilder.FilterByProperty('Precedence', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('Label') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${Label})
        $__cmdletization_queryBuilder.FilterByProperty('Label', $__cmdletization_values, $false, 'Default')
    }


    $__cmdletization_objectModelWrapper.ProcessRecord($__cmdletization_queryBuilder)
            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    End {
        try
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper.EndProcessing()
            }
        }
        catch
        {
            throw
        }
    }

    # .EXTERNALHELP MSFT_NetPrefixPolicy.cdxml-Help.xml
}
Microsoft.PowerShell.Core\Export-ModuleMember -Function 'Get-NetPrefixPolicy' -Alias '*'
        


ScriptBlock ID: 8e9eb310-f064-4be1-89cb-d7644ed322b5
Path:
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137827
Keywords=None
Message=Completed invocation of ScriptBlock ID: 5a5ba9e3-12ad-48f9-b766-8f0050be18cc
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137826
Keywords=None
Message=Started invocation of ScriptBlock ID: 5a5ba9e3-12ad-48f9-b766-8f0050be18cc
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=3
Type=Warning
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2137825
Keywords=None
Message=Creating Scriptblock text (2 of 2):
eIsPresent = $false
          if ($PSBoundParameters.ContainsKey('ReceiveSideScaling')) {
            [object]$__cmdletization_value = ${ReceiveSideScaling}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'ReceiveSideScaling'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetOffloadGlobalSetting.EnabledDisabledEnum'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'ReceiveSideScaling'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetOffloadGlobalSetting.EnabledDisabledEnum'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('ReceiveSegmentCoalescing')) {
            [object]$__cmdletization_value = ${ReceiveSegmentCoalescing}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'ReceiveSegmentCoalescing'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetOffloadGlobalSetting.EnabledDisabledEnum'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'ReceiveSegmentCoalescing'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetOffloadGlobalSetting.EnabledDisabledEnum'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('Chimney')) {
            [object]$__cmdletization_value = ${Chimney}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'Chimney'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetOffloadGlobalSetting.ChimneyEnum'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'Chimney'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetOffloadGlobalSetting.ChimneyEnum'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('TaskOffload')) {
            [object]$__cmdletization_value = ${TaskOffload}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'TaskOffload'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetOffloadGlobalSetting.EnabledDisabledEnum'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'TaskOffload'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetOffloadGlobalSetting.EnabledDisabledEnum'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('NetworkDirect')) {
            [object]$__cmdletization_value = ${NetworkDirect}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'NetworkDirect'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetOffloadGlobalSetting.EnabledDisabledEnum'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'NetworkDirect'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetOffloadGlobalSetting.EnabledDisabledEnum'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('NetworkDirectAcrossIPSubnets')) {
            [object]$__cmdletization_value = ${NetworkDirectAcrossIPSubnets}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'NetworkDirectAcrossIPSubnets'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetOffloadGlobalSetting.AllowedBlockedEnum'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'NetworkDirectAcrossIPSubnets'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetOffloadGlobalSetting.AllowedBlockedEnum'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('PacketCoalescingFilter')) {
            [object]$__cmdletization_value = ${PacketCoalescingFilter}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'PacketCoalescingFilter'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetOffloadGlobalSetting.EnabledDisabledEnum'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'PacketCoalescingFilter'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetOffloadGlobalSetting.EnabledDisabledEnum'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

      $__cmdletization_returnValue = $null
      $__cmdletization_methodInvocationInfo = [Microsoft.PowerShell.Cmdletization.MethodInvocationInfo]::new('cim:ModifyInstance', $__cmdletization_methodParameters, $__cmdletization_returnValue)
      $__cmdletization_passThru = $PSBoundParameters.ContainsKey('PassThru') -and $PassThru
            if ($PSBoundParameters.ContainsKey('InputObject')) {
                foreach ($x in $InputObject) { $__cmdletization_objectModelWrapper.ProcessRecord($x, $__cmdletization_methodInvocationInfo, $__cmdletization_PassThru) }
            } else {
                $__cmdletization_objectModelWrapper.ProcessRecord($__cmdletization_queryBuilder, $__cmdletization_methodInvocationInfo, $__cmdletization_PassThru)
            }
        }
    }

            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    End {
        try
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper.EndProcessing()
            }
        }
        catch
        {
            throw
        }
    }

    # .EXTERNALHELP MSFT_NetOffloadGlobalSetting.cdxml-Help.xml
}
Microsoft.PowerShell.Core\Export-ModuleMember -Function 'Set-NetOffloadGlobalSetting' -Alias '*'
        


ScriptBlock ID: 5a5ba9e3-12ad-48f9-b766-8f0050be18cc
Path:
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=3
Type=Warning
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2137824
Keywords=None
Message=Creating Scriptblock text (1 of 2):

#requires -version 3.0

try { Microsoft.PowerShell.Core\Set-StrictMode -Off } catch { }

$script:MyModule = $MyInvocation.MyCommand.ScriptBlock.Module

$script:ClassName = 'ROOT/StandardCimv2/MSFT_NetOffloadGlobalSetting'
$script:ClassVersion = '1.0.0'
$script:ModuleVersion = '1.0.0'
$script:ObjectModelWrapper = [Microsoft.PowerShell.Cmdletization.Cim.CimCmdletAdapter]

$script:PrivateData = [System.Collections.Generic.Dictionary[string,string]]::new()

Microsoft.PowerShell.Core\Export-ModuleMember -Function @()
        

function __cmdletization_BindCommonParameters
{
    param(
        $__cmdletization_objectModelWrapper,
        $myPSBoundParameters
    )       
                

        if ($myPSBoundParameters.ContainsKey('CimSession')) { 
            $__cmdletization_objectModelWrapper.PSObject.Properties['CimSession'].Value = $myPSBoundParameters['CimSession'] 
        }
                    

        if ($myPSBoundParameters.ContainsKey('ThrottleLimit')) { 
            $__cmdletization_objectModelWrapper.PSObject.Properties['ThrottleLimit'].Value = $myPSBoundParameters['ThrottleLimit'] 
        }
                    

        if ($myPSBoundParameters.ContainsKey('AsJob')) { 
            $__cmdletization_objectModelWrapper.PSObject.Properties['AsJob'].Value = $myPSBoundParameters['AsJob'] 
        }
                    

}
                

function Get-NetOffloadGlobalSetting
{
    [CmdletBinding(DefaultParameterSetName='ByName', PositionalBinding=$false)]
    
    [OutputType([Microsoft.Management.Infrastructure.CimInstance])]
[OutputType('Microsoft.Management.Infrastructure.CimInstance#ROOT/StandardCimv2/MSFT_NetOffloadGlobalSetting')]

    param(
    
    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetOffloadGlobalSetting.EnabledDisabledEnum[]]
    ${ReceiveSideScaling},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetOffloadGlobalSetting.EnabledDisabledEnum[]]
    ${ReceiveSegmentCoalescing},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetOffloadGlobalSetting.ChimneyEnum[]]
    ${Chimney},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetOffloadGlobalSetting.EnabledDisabledEnum[]]
    ${TaskOffload},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetOffloadGlobalSetting.EnabledDisabledEnum[]]
    ${NetworkDirect},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetOffloadGlobalSetting.AllowedBlockedEnum[]]
    ${NetworkDirectAcrossIPSubnets},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetOffloadGlobalSetting.EnabledDisabledEnum[]]
    ${PacketCoalescingFilter},

    [Parameter(ParameterSetName='ByName')]
    [Alias('Session')]
    [ValidateNotNullOrEmpty()]
    [CimSession[]]
    ${CimSession},

    [Parameter(ParameterSetName='ByName')]
    [int]
    ${ThrottleLimit},

    [Parameter(ParameterSetName='ByName')]
    [switch]
    ${AsJob})

    DynamicParam {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper = $script:ObjectModelWrapper::new()
                $__cmdletization_objectModelWrapper.Initialize($PSCmdlet, $script:ClassName, $script:ClassVersion, $script:ModuleVersion, $script:PrivateData)

                if ($__cmdletization_objectModelWrapper -is [System.Management.Automation.IDynamicParameters])
                {
                    ([System.Management.Automation.IDynamicParameters]$__cmdletization_objectModelWrapper).GetDynamicParameters()
                }
            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }

    Begin {
        $__cmdletization_exceptionHasBeenThrown = $false
        try 
        {
            __cmdletization_BindCommonParameters $__cmdletization_objectModelWrapper $PSBoundParameters
            $__cmdletization_objectModelWrapper.BeginProcessing()
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    Process {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
    $__cmdletization_queryBuilder = $__cmdletization_objectModelWrapper.GetQueryBuilder()
    if ($PSBoundParameters.ContainsKey('ReceiveSideScaling') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${ReceiveSideScaling})
        $__cmdletization_queryBuilder.FilterByProperty('ReceiveSideScaling', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('ReceiveSegmentCoalescing') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${ReceiveSegmentCoalescing})
        $__cmdletization_queryBuilder.FilterByProperty('ReceiveSegmentCoalescing', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('Chimney') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${Chimney})
        $__cmdletization_queryBuilder.FilterByProperty('Chimney', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('TaskOffload') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${TaskOffload})
        $__cmdletization_queryBuilder.FilterByProperty('TaskOffload', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('NetworkDirect') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${NetworkDirect})
        $__cmdletization_queryBuilder.FilterByProperty('NetworkDirect', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('NetworkDirectAcrossIPSubnets') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${NetworkDirectAcrossIPSubnets})
        $__cmdletization_queryBuilder.FilterByProperty('NetworkDirectAcrossIPSubnets', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('PacketCoalescingFilter') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${PacketCoalescingFilter})
        $__cmdletization_queryBuilder.FilterByProperty('PacketCoalescingFilter', $__cmdletization_values, $false, 'Default')
    }


    $__cmdletization_objectModelWrapper.ProcessRecord($__cmdletization_queryBuilder)
            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    End {
        try
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper.EndProcessing()
            }
        }
        catch
        {
            throw
        }
    }

    # .EXTERNALHELP MSFT_NetOffloadGlobalSetting.cdxml-Help.xml
}
Microsoft.PowerShell.Core\Export-ModuleMember -Function 'Get-NetOffloadGlobalSetting' -Alias '*'
        

function Set-NetOffloadGlobalSetting
{
    [CmdletBinding(DefaultParameterSetName='InputObject (cdxml)', SupportsShouldProcess=$true, ConfirmImpact='Medium', PositionalBinding=$false)]
    
    [OutputType([Microsoft.Management.Infrastructure.CimInstance])]
[OutputType('Microsoft.Management.Infrastructure.CimInstance#ROOT/StandardCimv2/MSFT_NetOffloadGlobalSetting')]

    param(
    
    [Parameter(ParameterSetName='InputObject (cdxml)', ValueFromPipeline=$true)]
    [PSTypeName('Microsoft.Management.Infrastructure.CimInstance#MSFT_NetOffloadGlobalSetting')]
    [ValidateNotNull()]
    [ciminstance[]]
    ${InputObject},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetOffloadGlobalSetting.EnabledDisabledEnum]
    ${ReceiveSideScaling},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetOffloadGlobalSetting.EnabledDisabledEnum]
    ${ReceiveSegmentCoalescing},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetOffloadGlobalSetting.ChimneyEnum]
    ${Chimney},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetOffloadGlobalSetting.EnabledDisabledEnum]
    ${TaskOffload},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetOffloadGlobalSetting.EnabledDisabledEnum]
    ${NetworkDirect},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetOffloadGlobalSetting.AllowedBlockedEnum]
    ${NetworkDirectAcrossIPSubnets},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetOffloadGlobalSetting.EnabledDisabledEnum]
    ${PacketCoalescingFilter},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Alias('Session')]
    [ValidateNotNullOrEmpty()]
    [CimSession[]]
    ${CimSession},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [int]
    ${ThrottleLimit},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [switch]
    ${AsJob},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [switch]
    ${PassThru})

    DynamicParam {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper = $script:ObjectModelWrapper::new()
                $__cmdletization_objectModelWrapper.Initialize($PSCmdlet, $script:ClassName, $script:ClassVersion, $script:ModuleVersion, $script:PrivateData)

                if ($__cmdletization_objectModelWrapper -is [System.Management.Automation.IDynamicParameters])
                {
                    ([System.Management.Automation.IDynamicParameters]$__cmdletization_objectModelWrapper).GetDynamicParameters()
                }
            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }

    Begin {
        $__cmdletization_exceptionHasBeenThrown = $false
        try 
        {
            __cmdletization_BindCommonParameters $__cmdletization_objectModelWrapper $PSBoundParameters
            $__cmdletization_objectModelWrapper.BeginProcessing()
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    Process {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
    $__cmdletization_queryBuilder = $__cmdletization_objectModelWrapper.GetQueryBuilder()


    $__cmdletization_methodParameters = [System.Collections.Generic.List[Microsoft.PowerShell.Cmdletization.MethodParameter]]::new()
    switch -exact ($PSCmdlet.ParameterSetName) { 
        { @('InputObject (cdxml)') -contains $_ } {
          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValu

ScriptBlock ID: 5a5ba9e3-12ad-48f9-b766-8f0050be18cc
Path:
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137823
Keywords=None
Message=Completed invocation of ScriptBlock ID: cc0e0fee-b188-4b3e-8374-db607fab79f7
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137822
Keywords=None
Message=Started invocation of ScriptBlock ID: cc0e0fee-b188-4b3e-8374-db607fab79f7
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=3
Type=Warning
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2137821
Keywords=None
Message=Creating Scriptblock text (4 of 4):
hru)
            }
        }
    }

            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    End {
        try
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper.EndProcessing()
            }
        }
        catch
        {
            throw
        }
    }

    # .EXTERNALHELP MSFT_NetNeighbor.cdxml-Help.xml
}
Microsoft.PowerShell.Core\Export-ModuleMember -Function 'Remove-NetNeighbor' -Alias '*'
        


ScriptBlock ID: cc0e0fee-b188-4b3e-8374-db607fab79f7
Path:
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=3
Type=Warning
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2137820
Keywords=None
Message=Creating Scriptblock text (3 of 4):
arameter(ParameterSetName='InputObject (cdxml)')]
    [switch]
    ${AsJob},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [switch]
    ${PassThru})

    DynamicParam {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper = $script:ObjectModelWrapper::new()
                $__cmdletization_objectModelWrapper.Initialize($PSCmdlet, $script:ClassName, $script:ClassVersion, $script:ModuleVersion, $script:PrivateData)

                if ($__cmdletization_objectModelWrapper -is [System.Management.Automation.IDynamicParameters])
                {
                    ([System.Management.Automation.IDynamicParameters]$__cmdletization_objectModelWrapper).GetDynamicParameters()
                }
            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }

    Begin {
        $__cmdletization_exceptionHasBeenThrown = $false
        try 
        {
            __cmdletization_BindCommonParameters $__cmdletization_objectModelWrapper $PSBoundParameters
            $__cmdletization_objectModelWrapper.BeginProcessing()
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    Process {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
    $__cmdletization_queryBuilder = $__cmdletization_objectModelWrapper.GetQueryBuilder()
    if ($PSBoundParameters.ContainsKey('IPAddress') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${IPAddress})
        $__cmdletization_queryBuilder.FilterByProperty('IPAddress', $__cmdletization_values, $true, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('InterfaceIndex') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${InterfaceIndex})
        $__cmdletization_queryBuilder.FilterByProperty('InterfaceIndex', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('InterfaceAlias') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${InterfaceAlias})
        $__cmdletization_queryBuilder.FilterByProperty('InterfaceAlias', $__cmdletization_values, $true, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('State') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${State})
        $__cmdletization_queryBuilder.FilterByProperty('State', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('AddressFamily') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${AddressFamily})
        $__cmdletization_queryBuilder.FilterByProperty('AddressFamily', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('PolicyStore') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
    $__cmdletization_queryBuilder.AddQueryOption('PolicyStore', ${PolicyStore})
    }
    if ($PSBoundParameters.ContainsKey('IncludeAllCompartments') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
    $__cmdletization_queryBuilder.AddQueryOption('IncludeAllCompartments', ${IncludeAllCompartments})
    }


    $__cmdletization_methodParameters = [System.Collections.Generic.List[Microsoft.PowerShell.Cmdletization.MethodParameter]]::new()
    switch -exact ($PSCmdlet.ParameterSetName) { 
        { @('ByName', 'InputObject (cdxml)') -contains $_ } {
          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('LinkLayerAddress')) {
            [object]$__cmdletization_value = ${LinkLayerAddress}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'LinkLayerAddress'; ParameterType = 'System.String'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'LinkLayerAddress'; ParameterType = 'System.String'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

      $__cmdletization_returnValue = $null
      $__cmdletization_methodInvocationInfo = [Microsoft.PowerShell.Cmdletization.MethodInvocationInfo]::new('cim:ModifyInstance', $__cmdletization_methodParameters, $__cmdletization_returnValue)
      $__cmdletization_passThru = $PSBoundParameters.ContainsKey('PassThru') -and $PassThru
            if ($PSBoundParameters.ContainsKey('InputObject')) {
                foreach ($x in $InputObject) { $__cmdletization_objectModelWrapper.ProcessRecord($x, $__cmdletization_methodInvocationInfo, $__cmdletization_PassThru) }
            } else {
                $__cmdletization_objectModelWrapper.ProcessRecord($__cmdletization_queryBuilder, $__cmdletization_methodInvocationInfo, $__cmdletization_PassThru)
            }
        }
    }

            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    End {
        try
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper.EndProcessing()
            }
        }
        catch
        {
            throw
        }
    }

    # .EXTERNALHELP MSFT_NetNeighbor.cdxml-Help.xml
}
Microsoft.PowerShell.Core\Export-ModuleMember -Function 'Set-NetNeighbor' -Alias '*'
        

function Remove-NetNeighbor
{
    [CmdletBinding(DefaultParameterSetName='ByName', SupportsShouldProcess=$true, ConfirmImpact='High', PositionalBinding=$false)]
    
    [OutputType([Microsoft.Management.Infrastructure.CimInstance])]
[OutputType('Microsoft.Management.Infrastructure.CimInstance#ROOT/StandardCimv2/MSFT_NetNeighbor')]

    param(
    
    [Parameter(ParameterSetName='ByName', Position=0)]
    [ValidateNotNull()]
    [string[]]
    ${IPAddress},

    [Parameter(ParameterSetName='ByName', ValueFromPipelineByPropertyName=$true)]
    [Alias('ifIndex')]
    [ValidateNotNull()]
    [uint32[]]
    ${InterfaceIndex},

    [Parameter(ParameterSetName='ByName', ValueFromPipelineByPropertyName=$true)]
    [Alias('ifAlias')]
    [ValidateNotNull()]
    [string[]]
    ${InterfaceAlias},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [string[]]
    ${LinkLayerAddress},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetNeighbor.State[]]
    ${State},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetNeighbor.AddressFamily[]]
    ${AddressFamily},

    [Parameter(ParameterSetName='ByName', ValueFromPipeline=$true)]
    [PSTypeName('Microsoft.Management.Infrastructure.CimInstance#root/standardcimv2/MSFT_NetIPInterface')]
    [ValidateNotNull()]
    [ciminstance]
    ${AssociatedIPInterface},

    [Parameter(ParameterSetName='ByName')]
    [string]
    ${PolicyStore},

    [Parameter(ParameterSetName='ByName')]
    [switch]
    ${IncludeAllCompartments},

    [Parameter(ParameterSetName='InputObject (cdxml)', Mandatory=$true, ValueFromPipeline=$true)]
    [PSTypeName('Microsoft.Management.Infrastructure.CimInstance#MSFT_NetNeighbor')]
    [ValidateNotNull()]
    [ciminstance[]]
    ${InputObject},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Alias('Session')]
    [ValidateNotNullOrEmpty()]
    [CimSession[]]
    ${CimSession},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [int]
    ${ThrottleLimit},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [switch]
    ${AsJob},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [switch]
    ${PassThru})

    DynamicParam {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper = $script:ObjectModelWrapper::new()
                $__cmdletization_objectModelWrapper.Initialize($PSCmdlet, $script:ClassName, $script:ClassVersion, $script:ModuleVersion, $script:PrivateData)

                if ($__cmdletization_objectModelWrapper -is [System.Management.Automation.IDynamicParameters])
                {
                    ([System.Management.Automation.IDynamicParameters]$__cmdletization_objectModelWrapper).GetDynamicParameters()
                }
            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }

    Begin {
        $__cmdletization_exceptionHasBeenThrown = $false
        try 
        {
            __cmdletization_BindCommonParameters $__cmdletization_objectModelWrapper $PSBoundParameters
            $__cmdletization_objectModelWrapper.BeginProcessing()
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    Process {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
    $__cmdletization_queryBuilder = $__cmdletization_objectModelWrapper.GetQueryBuilder()
    if ($PSBoundParameters.ContainsKey('IPAddress') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${IPAddress})
        $__cmdletization_queryBuilder.FilterByProperty('IPAddress', $__cmdletization_values, $true, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('InterfaceIndex') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${InterfaceIndex})
        $__cmdletization_queryBuilder.FilterByProperty('InterfaceIndex', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('InterfaceAlias') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${InterfaceAlias})
        $__cmdletization_queryBuilder.FilterByProperty('InterfaceAlias', $__cmdletization_values, $true, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('LinkLayerAddress') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${LinkLayerAddress})
        $__cmdletization_queryBuilder.FilterByProperty('LinkLayerAddress', $__cmdletization_values, $true, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('State') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${State})
        $__cmdletization_queryBuilder.FilterByProperty('State', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('AddressFamily') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${AddressFamily})
        $__cmdletization_queryBuilder.FilterByProperty('AddressFamily', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('AssociatedIPInterface') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
    $__cmdletization_queryBuilder.FilterByAssociatedInstance(${AssociatedIPInterface}, 'MSFT_NetIPInterfaceNeighbor', 'Antecedent', 'Dependent', 'Default')
    }
    if ($PSBoundParameters.ContainsKey('PolicyStore') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
    $__cmdletization_queryBuilder.AddQueryOption('PolicyStore', ${PolicyStore})
    }
    if ($PSBoundParameters.ContainsKey('IncludeAllCompartments') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
    $__cmdletization_queryBuilder.AddQueryOption('IncludeAllCompartments', ${IncludeAllCompartments})
    }


    $__cmdletization_methodParameters = [System.Collections.Generic.List[Microsoft.PowerShell.Cmdletization.MethodParameter]]::new()
    switch -exact ($PSCmdlet.ParameterSetName) { 
        { @('ByName', 'InputObject (cdxml)') -contains $_ } {
      $__cmdletization_returnValue = $null
      $__cmdletization_methodInvocationInfo = [Microsoft.PowerShell.Cmdletization.MethodInvocationInfo]::new('cim:DeleteInstance', $__cmdletization_methodParameters, $__cmdletization_returnValue)
      $__cmdletization_passThru = $PSBoundParameters.ContainsKey('PassThru') -and $PassThru
            if ($PSBoundParameters.ContainsKey('InputObject')) {
                foreach ($x in $InputObject) { $__cmdletization_objectModelWrapper.ProcessRecord($x, $__cmdletization_methodInvocationInfo, $__cmdletization_PassThru) }
            } else {
                $__cmdletization_objectModelWrapper.ProcessRecord($__cmdletization_queryBuilder, $__cmdletization_methodInvocationInfo, $__cmdletization_PassT

ScriptBlock ID: cc0e0fee-b188-4b3e-8374-db607fab79f7
Path:
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=3
Type=Warning
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2137819
Keywords=None
Message=Creating Scriptblock text (2 of 4):
ss'; ParameterType = 'System.String'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'LinkLayerAddress'; ParameterType = 'System.String'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('PolicyStore')) {
          [object]$__cmdletization_value = ${PolicyStore}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'PolicyStore'; ParameterType = 'System.String'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'PolicyStore'; ParameterType = 'System.String'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('State')) {
          [object]$__cmdletization_value = ${State}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'State'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetNeighbor.State'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'State'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetNeighbor.State'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('AddressFamily')) {
          [object]$__cmdletization_value = ${AddressFamily}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'AddressFamily'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetNeighbor.AddressFamily'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'AddressFamily'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetNeighbor.AddressFamily'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'CmdletOutput'; ParameterType = 'Microsoft.Management.Infrastructure.CimInstance[]'; Bindings = 'Out'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

      $__cmdletization_returnValue = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{ Name = 'ReturnValue'; ParameterType = 'System.UInt32'; Bindings = 'Error'; Value = $null; IsValuePresent = $false }
      $__cmdletization_methodInvocationInfo = [Microsoft.PowerShell.Cmdletization.MethodInvocationInfo]::new('Create', $__cmdletization_methodParameters, $__cmdletization_returnValue)
      $__cmdletization_objectModelWrapper.ProcessRecord($__cmdletization_methodInvocationInfo)
        }
    }

            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    End {
        try
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper.EndProcessing()
            }
        }
        catch
        {
            throw
        }
    }

    # .EXTERNALHELP MSFT_NetNeighbor.cdxml-Help.xml
}
Microsoft.PowerShell.Core\Export-ModuleMember -Function 'New-NetNeighbor' -Alias '*'
        

function Get-NetNeighbor
{
    [CmdletBinding(DefaultParameterSetName='ByName', PositionalBinding=$false)]
    
    [OutputType([Microsoft.Management.Infrastructure.CimInstance])]
[OutputType('Microsoft.Management.Infrastructure.CimInstance#ROOT/StandardCimv2/MSFT_NetNeighbor')]

    param(
    
    [Parameter(ParameterSetName='ByName', Position=0)]
    [ValidateNotNull()]
    [string[]]
    ${IPAddress},

    [Parameter(ParameterSetName='ByName', ValueFromPipelineByPropertyName=$true)]
    [Alias('ifIndex')]
    [ValidateNotNull()]
    [uint32[]]
    ${InterfaceIndex},

    [Parameter(ParameterSetName='ByName', ValueFromPipelineByPropertyName=$true)]
    [Alias('ifAlias')]
    [ValidateNotNull()]
    [string[]]
    ${InterfaceAlias},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [string[]]
    ${LinkLayerAddress},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetNeighbor.State[]]
    ${State},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetNeighbor.AddressFamily[]]
    ${AddressFamily},

    [Parameter(ParameterSetName='ByName', ValueFromPipeline=$true)]
    [PSTypeName('Microsoft.Management.Infrastructure.CimInstance#root/standardcimv2/MSFT_NetIPInterface')]
    [ValidateNotNull()]
    [ciminstance]
    ${AssociatedIPInterface},

    [Parameter(ParameterSetName='ByName')]
    [string]
    ${PolicyStore},

    [Parameter(ParameterSetName='ByName')]
    [switch]
    ${IncludeAllCompartments},

    [Parameter(ParameterSetName='ByName')]
    [Alias('Session')]
    [ValidateNotNullOrEmpty()]
    [CimSession[]]
    ${CimSession},

    [Parameter(ParameterSetName='ByName')]
    [int]
    ${ThrottleLimit},

    [Parameter(ParameterSetName='ByName')]
    [switch]
    ${AsJob})

    DynamicParam {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper = $script:ObjectModelWrapper::new()
                $__cmdletization_objectModelWrapper.Initialize($PSCmdlet, $script:ClassName, $script:ClassVersion, $script:ModuleVersion, $script:PrivateData)

                if ($__cmdletization_objectModelWrapper -is [System.Management.Automation.IDynamicParameters])
                {
                    ([System.Management.Automation.IDynamicParameters]$__cmdletization_objectModelWrapper).GetDynamicParameters()
                }
            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }

    Begin {
        $__cmdletization_exceptionHasBeenThrown = $false
        try 
        {
            __cmdletization_BindCommonParameters $__cmdletization_objectModelWrapper $PSBoundParameters
            $__cmdletization_objectModelWrapper.BeginProcessing()
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    Process {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
    $__cmdletization_queryBuilder = $__cmdletization_objectModelWrapper.GetQueryBuilder()
    if ($PSBoundParameters.ContainsKey('IPAddress') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${IPAddress})
        $__cmdletization_queryBuilder.FilterByProperty('IPAddress', $__cmdletization_values, $true, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('InterfaceIndex') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${InterfaceIndex})
        $__cmdletization_queryBuilder.FilterByProperty('InterfaceIndex', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('InterfaceAlias') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${InterfaceAlias})
        $__cmdletization_queryBuilder.FilterByProperty('InterfaceAlias', $__cmdletization_values, $true, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('LinkLayerAddress') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${LinkLayerAddress})
        $__cmdletization_queryBuilder.FilterByProperty('LinkLayerAddress', $__cmdletization_values, $true, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('State') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${State})
        $__cmdletization_queryBuilder.FilterByProperty('State', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('AddressFamily') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${AddressFamily})
        $__cmdletization_queryBuilder.FilterByProperty('AddressFamily', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('AssociatedIPInterface') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
    $__cmdletization_queryBuilder.FilterByAssociatedInstance(${AssociatedIPInterface}, 'MSFT_NetIPInterfaceNeighbor', 'Antecedent', 'Dependent', 'Default')
    }
    if ($PSBoundParameters.ContainsKey('PolicyStore') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
    $__cmdletization_queryBuilder.AddQueryOption('PolicyStore', ${PolicyStore})
    }
    if ($PSBoundParameters.ContainsKey('IncludeAllCompartments') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
    $__cmdletization_queryBuilder.AddQueryOption('IncludeAllCompartments', ${IncludeAllCompartments})
    }


    $__cmdletization_objectModelWrapper.ProcessRecord($__cmdletization_queryBuilder)
            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    End {
        try
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper.EndProcessing()
            }
        }
        catch
        {
            throw
        }
    }

    # .EXTERNALHELP MSFT_NetNeighbor.cdxml-Help.xml
}
Microsoft.PowerShell.Core\Export-ModuleMember -Function 'Get-NetNeighbor' -Alias '*'
        

function Set-NetNeighbor
{
    [CmdletBinding(DefaultParameterSetName='ByName', SupportsShouldProcess=$true, ConfirmImpact='Medium', PositionalBinding=$false)]
    
    [OutputType([Microsoft.Management.Infrastructure.CimInstance])]
[OutputType('Microsoft.Management.Infrastructure.CimInstance#ROOT/StandardCimv2/MSFT_NetNeighbor')]

    param(
    
    [Parameter(ParameterSetName='ByName', Position=0)]
    [ValidateNotNull()]
    [string[]]
    ${IPAddress},

    [Parameter(ParameterSetName='ByName', ValueFromPipelineByPropertyName=$true)]
    [Alias('ifIndex')]
    [ValidateNotNull()]
    [uint32[]]
    ${InterfaceIndex},

    [Parameter(ParameterSetName='ByName', ValueFromPipelineByPropertyName=$true)]
    [Alias('ifAlias')]
    [ValidateNotNull()]
    [string[]]
    ${InterfaceAlias},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetNeighbor.State[]]
    ${State},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetNeighbor.AddressFamily[]]
    ${AddressFamily},

    [Parameter(ParameterSetName='ByName')]
    [string]
    ${PolicyStore},

    [Parameter(ParameterSetName='ByName')]
    [switch]
    ${IncludeAllCompartments},

    [Parameter(ParameterSetName='InputObject (cdxml)', Mandatory=$true, ValueFromPipeline=$true)]
    [PSTypeName('Microsoft.Management.Infrastructure.CimInstance#MSFT_NetNeighbor')]
    [ValidateNotNull()]
    [ciminstance[]]
    ${InputObject},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [string]
    ${LinkLayerAddress},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Alias('Session')]
    [ValidateNotNullOrEmpty()]
    [CimSession[]]
    ${CimSession},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [int]
    ${ThrottleLimit},

    [Parameter(ParameterSetName='ByName')]
    [P

ScriptBlock ID: cc0e0fee-b188-4b3e-8374-db607fab79f7
Path:
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=3
Type=Warning
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2137818
Keywords=None
Message=Creating Scriptblock text (1 of 4):

#requires -version 3.0

try { Microsoft.PowerShell.Core\Set-StrictMode -Off } catch { }

$script:MyModule = $MyInvocation.MyCommand.ScriptBlock.Module

$script:ClassName = 'ROOT/StandardCimv2/MSFT_NetNeighbor'
$script:ClassVersion = '1.0.0'
$script:ModuleVersion = '1.0.0'
$script:ObjectModelWrapper = [Microsoft.PowerShell.Cmdletization.Cim.CimCmdletAdapter]

$script:PrivateData = [System.Collections.Generic.Dictionary[string,string]]::new()

Microsoft.PowerShell.Core\Export-ModuleMember -Function @()
        

function __cmdletization_BindCommonParameters
{
    param(
        $__cmdletization_objectModelWrapper,
        $myPSBoundParameters
    )       
                

        if ($myPSBoundParameters.ContainsKey('CimSession')) { 
            $__cmdletization_objectModelWrapper.PSObject.Properties['CimSession'].Value = $myPSBoundParameters['CimSession'] 
        }
                    

        if ($myPSBoundParameters.ContainsKey('ThrottleLimit')) { 
            $__cmdletization_objectModelWrapper.PSObject.Properties['ThrottleLimit'].Value = $myPSBoundParameters['ThrottleLimit'] 
        }
                    

        if ($myPSBoundParameters.ContainsKey('AsJob')) { 
            $__cmdletization_objectModelWrapper.PSObject.Properties['AsJob'].Value = $myPSBoundParameters['AsJob'] 
        }
                    

}
                

function New-NetNeighbor
{
    [CmdletBinding(DefaultParameterSetName='ByInterfaceAlias', SupportsShouldProcess=$true, ConfirmImpact='Medium', PositionalBinding=$false)]
    
    [OutputType([Microsoft.Management.Infrastructure.CimInstance[]])][OutputType([Microsoft.Management.Infrastructure.CimInstance[]])]
    param(
    
    [Parameter(ParameterSetName='ByInterfaceAlias', Mandatory=$true, Position=0)]
    [Parameter(ParameterSetName='ByInterfaceIndex', Mandatory=$true, Position=0)]
    [string]
    ${IPAddress},

    [Parameter(ParameterSetName='ByInterfaceAlias', Mandatory=$true, ValueFromPipelineByPropertyName=$true)]
    [Alias('ifAlias')]
    [string]
    ${InterfaceAlias},

    [Parameter(ParameterSetName='ByInterfaceAlias')]
    [Parameter(ParameterSetName='ByInterfaceIndex')]
    [string]
    ${LinkLayerAddress},

    [Parameter(ParameterSetName='ByInterfaceAlias')]
    [Parameter(ParameterSetName='ByInterfaceIndex')]
    [string]
    ${PolicyStore},

    [Parameter(ParameterSetName='ByInterfaceAlias')]
    [Parameter(ParameterSetName='ByInterfaceIndex')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetNeighbor.State]
    ${State},

    [Parameter(ParameterSetName='ByInterfaceAlias')]
    [Parameter(ParameterSetName='ByInterfaceIndex')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetNeighbor.AddressFamily]
    ${AddressFamily},

    [Parameter(ParameterSetName='ByInterfaceIndex', Mandatory=$true, ValueFromPipelineByPropertyName=$true)]
    [Alias('ifIndex')]
    [uint32]
    ${InterfaceIndex},

    [Parameter(ParameterSetName='ByInterfaceAlias')]
    [Parameter(ParameterSetName='ByInterfaceIndex')]
    [Alias('Session')]
    [ValidateNotNullOrEmpty()]
    [CimSession[]]
    ${CimSession},

    [Parameter(ParameterSetName='ByInterfaceAlias')]
    [Parameter(ParameterSetName='ByInterfaceIndex')]
    [int]
    ${ThrottleLimit},

    [Parameter(ParameterSetName='ByInterfaceAlias')]
    [Parameter(ParameterSetName='ByInterfaceIndex')]
    [switch]
    ${AsJob})

    DynamicParam {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper = $script:ObjectModelWrapper::new()
                $__cmdletization_objectModelWrapper.Initialize($PSCmdlet, $script:ClassName, $script:ClassVersion, $script:ModuleVersion, $script:PrivateData)

                if ($__cmdletization_objectModelWrapper -is [System.Management.Automation.IDynamicParameters])
                {
                    ([System.Management.Automation.IDynamicParameters]$__cmdletization_objectModelWrapper).GetDynamicParameters()
                }
            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }

    Begin {
        $__cmdletization_exceptionHasBeenThrown = $false
        try 
        {
            __cmdletization_BindCommonParameters $__cmdletization_objectModelWrapper $PSBoundParameters
            $__cmdletization_objectModelWrapper.BeginProcessing()
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    Process {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
      $__cmdletization_methodParameters = [System.Collections.Generic.List[Microsoft.PowerShell.Cmdletization.MethodParameter]]::new()

      switch -exact ($PSCmdlet.ParameterSetName) { 
        { @('ByInterfaceAlias') -contains $_ } {
        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('IPAddress')) {
          [object]$__cmdletization_value = ${IPAddress}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'IPAddress'; ParameterType = 'System.String'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'IPAddress'; ParameterType = 'System.String'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('InterfaceAlias')) {
          [object]$__cmdletization_value = ${InterfaceAlias}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'InterfaceAlias'; ParameterType = 'System.String'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'InterfaceAlias'; ParameterType = 'System.String'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('LinkLayerAddress')) {
          [object]$__cmdletization_value = ${LinkLayerAddress}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'LinkLayerAddress'; ParameterType = 'System.String'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'LinkLayerAddress'; ParameterType = 'System.String'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('PolicyStore')) {
          [object]$__cmdletization_value = ${PolicyStore}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'PolicyStore'; ParameterType = 'System.String'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'PolicyStore'; ParameterType = 'System.String'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('State')) {
          [object]$__cmdletization_value = ${State}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'State'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetNeighbor.State'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'State'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetNeighbor.State'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('AddressFamily')) {
          [object]$__cmdletization_value = ${AddressFamily}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'AddressFamily'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetNeighbor.AddressFamily'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'AddressFamily'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetNeighbor.AddressFamily'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'CmdletOutput'; ParameterType = 'Microsoft.Management.Infrastructure.CimInstance[]'; Bindings = 'Out'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

      $__cmdletization_returnValue = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{ Name = 'ReturnValue'; ParameterType = 'System.UInt32'; Bindings = 'Error'; Value = $null; IsValuePresent = $false }
      $__cmdletization_methodInvocationInfo = [Microsoft.PowerShell.Cmdletization.MethodInvocationInfo]::new('Create', $__cmdletization_methodParameters, $__cmdletization_returnValue)
      $__cmdletization_objectModelWrapper.ProcessRecord($__cmdletization_methodInvocationInfo)
        }
        { @('ByInterfaceIndex') -contains $_ } {
        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('IPAddress')) {
          [object]$__cmdletization_value = ${IPAddress}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'IPAddress'; ParameterType = 'System.String'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'IPAddress'; ParameterType = 'System.String'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('InterfaceIndex')) {
          [object]$__cmdletization_value = ${InterfaceIndex}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'InterfaceIndex'; ParameterType = 'System.UInt32'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'InterfaceIndex'; ParameterType = 'System.UInt32'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('LinkLayerAddress')) {
          [object]$__cmdletization_value = ${LinkLayerAddress}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'LinkLayerAddre

ScriptBlock ID: cc0e0fee-b188-4b3e-8374-db607fab79f7
Path:
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137817
Keywords=None
Message=Completed invocation of ScriptBlock ID: cde5ff8b-ac94-4c96-afb0-99ae759e74f0
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137816
Keywords=None
Message=Started invocation of ScriptBlock ID: cde5ff8b-ac94-4c96-afb0-99ae759e74f0
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=3
Type=Warning
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2137815
Keywords=None
Message=Creating Scriptblock text (4 of 4):
eters.ContainsKey('MaxTemporaryDadAttempts')) {
            [object]$__cmdletization_value = ${MaxTemporaryDadAttempts}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'MaxDadAttempts'; ParameterType = 'System.UInt32'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'MaxDadAttempts'; ParameterType = 'System.UInt32'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('MaxTemporaryValidLifetime')) {
            [object]$__cmdletization_value = ${MaxTemporaryValidLifetime}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'MaxValidLifetime'; ParameterType = 'System.TimeSpan'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'MaxValidLifetime'; ParameterType = 'System.TimeSpan'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('MaxTemporaryPreferredLifetime')) {
            [object]$__cmdletization_value = ${MaxTemporaryPreferredLifetime}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'MaxPreferredLifetime'; ParameterType = 'System.TimeSpan'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'MaxPreferredLifetime'; ParameterType = 'System.TimeSpan'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('TemporaryRegenerateTime')) {
            [object]$__cmdletization_value = ${TemporaryRegenerateTime}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'RegenerateTime'; ParameterType = 'System.TimeSpan'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'RegenerateTime'; ParameterType = 'System.TimeSpan'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('MaxTemporaryDesyncTime')) {
            [object]$__cmdletization_value = ${MaxTemporaryDesyncTime}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'MaxRandomTime'; ParameterType = 'System.TimeSpan'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'MaxRandomTime'; ParameterType = 'System.TimeSpan'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

      $__cmdletization_returnValue = $null
      $__cmdletization_methodInvocationInfo = [Microsoft.PowerShell.Cmdletization.MethodInvocationInfo]::new('cim:ModifyInstance', $__cmdletization_methodParameters, $__cmdletization_returnValue)
      $__cmdletization_passThru = $PSBoundParameters.ContainsKey('PassThru') -and $PassThru
            if ($PSBoundParameters.ContainsKey('InputObject')) {
                foreach ($x in $InputObject) { $__cmdletization_objectModelWrapper.ProcessRecord($x, $__cmdletization_methodInvocationInfo, $__cmdletization_PassThru) }
            } else {
                $__cmdletization_objectModelWrapper.ProcessRecord($__cmdletization_queryBuilder, $__cmdletization_methodInvocationInfo, $__cmdletization_PassThru)
            }
        }
    }

            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    End {
        try
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper.EndProcessing()
            }
        }
        catch
        {
            throw
        }
    }

    # .EXTERNALHELP MSFT_NetIPv6Protocol.cdxml-Help.xml
}
Microsoft.PowerShell.Core\Export-ModuleMember -Function 'Set-NetIPv6Protocol' -Alias '*'
        


ScriptBlock ID: cde5ff8b-ac94-4c96-afb0-99ae759e74f0
Path:
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=3
Type=Warning
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2137814
Keywords=None
Message=Creating Scriptblock text (3 of 4):
ueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('IcmpRedirects')) {
            [object]$__cmdletization_value = ${IcmpRedirects}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'IcmpRedirects'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv6Protocol.IcmpRedirects'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'IcmpRedirects'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv6Protocol.IcmpRedirects'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('SourceRoutingBehavior')) {
            [object]$__cmdletization_value = ${SourceRoutingBehavior}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'SourceRoutingBehavior'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv6Protocol.SourceRoutingBehavior'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'SourceRoutingBehavior'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv6Protocol.SourceRoutingBehavior'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('DhcpMediaSense')) {
            [object]$__cmdletization_value = ${DhcpMediaSense}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'DhcpMediaSense'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv6Protocol.DhcpMediaSense'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'DhcpMediaSense'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv6Protocol.DhcpMediaSense'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('MediaSenseEventLog')) {
            [object]$__cmdletization_value = ${MediaSenseEventLog}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'MediaSenseEventLog'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv6Protocol.MediaSenseEventLog'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'MediaSenseEventLog'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv6Protocol.MediaSenseEventLog'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('MldLevel')) {
            [object]$__cmdletization_value = ${MldLevel}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'MldLevel'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv6Protocol.MldLevel'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'MldLevel'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv6Protocol.MldLevel'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('MldVersion')) {
            [object]$__cmdletization_value = ${MldVersion}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'MldVersion'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv6Protocol.MldVersion'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'MldVersion'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv6Protocol.MldVersion'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('MulticastForwarding')) {
            [object]$__cmdletization_value = ${MulticastForwarding}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'MulticastForwarding'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv6Protocol.MulticastForwarding'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'MulticastForwarding'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv6Protocol.MulticastForwarding'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('GroupForwardedFragments')) {
            [object]$__cmdletization_value = ${GroupForwardedFragments}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'GroupForwardedFragments'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv6Protocol.GroupForwardedFragments'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'GroupForwardedFragments'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv6Protocol.GroupForwardedFragments'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('RandomizeIdentifiers')) {
            [object]$__cmdletization_value = ${RandomizeIdentifiers}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'RandomizeIdentifiers'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv6Protocol.RandomizeIdentifiers'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'RandomizeIdentifiers'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv6Protocol.RandomizeIdentifiers'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('AddressMaskReply')) {
            [object]$__cmdletization_value = ${AddressMaskReply}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'AddressMaskReply'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv6Protocol.AddressMaskReply'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'AddressMaskReply'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv6Protocol.AddressMaskReply'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('UseTemporaryAddresses')) {
            [object]$__cmdletization_value = ${UseTemporaryAddresses}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'UseTemporaryAddresses'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv6Protocol.UseTemporaryAddresses'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'UseTemporaryAddresses'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv6Protocol.UseTemporaryAddresses'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParam

ScriptBlock ID: cde5ff8b-ac94-4c96-afb0-99ae759e74f0
Path:
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=3
Type=Warning
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2137813
Keywords=None
Message=Creating Scriptblock text (2 of 4):
') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${MaxTemporaryDadAttempts})
        $__cmdletization_queryBuilder.FilterByProperty('MaxDadAttempts', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('MaxTemporaryValidLifetime') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${MaxTemporaryValidLifetime})
        $__cmdletization_queryBuilder.FilterByProperty('MaxValidLifetime', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('MaxTemporaryPreferredLifetime') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${MaxTemporaryPreferredLifetime})
        $__cmdletization_queryBuilder.FilterByProperty('MaxPreferredLifetime', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('TemporaryRegenerateTime') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${TemporaryRegenerateTime})
        $__cmdletization_queryBuilder.FilterByProperty('RegenerateTime', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('MaxTemporaryDesyncTime') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${MaxTemporaryDesyncTime})
        $__cmdletization_queryBuilder.FilterByProperty('MaxRandomTime', $__cmdletization_values, $false, 'Default')
    }


    $__cmdletization_objectModelWrapper.ProcessRecord($__cmdletization_queryBuilder)
            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    End {
        try
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper.EndProcessing()
            }
        }
        catch
        {
            throw
        }
    }

    # .EXTERNALHELP MSFT_NetIPv6Protocol.cdxml-Help.xml
}
Microsoft.PowerShell.Core\Export-ModuleMember -Function 'Get-NetIPv6Protocol' -Alias '*'
        

function Set-NetIPv6Protocol
{
    [CmdletBinding(DefaultParameterSetName='InputObject (cdxml)', SupportsShouldProcess=$true, ConfirmImpact='Medium', PositionalBinding=$false)]
    
    [OutputType([Microsoft.Management.Infrastructure.CimInstance])]
[OutputType('Microsoft.Management.Infrastructure.CimInstance#ROOT/StandardCimv2/MSFT_NetIPv6Protocol')]

    param(
    
    [Parameter(ParameterSetName='InputObject (cdxml)', ValueFromPipeline=$true)]
    [PSTypeName('Microsoft.Management.Infrastructure.CimInstance#MSFT_NetIPv6Protocol')]
    [ValidateNotNull()]
    [ciminstance[]]
    ${InputObject},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [uint32]
    ${DefaultHopLimit},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Alias('NeighborCacheLimit')]
    [uint32]
    ${NeighborCacheLimitEntries},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Alias('RouteCacheLimit')]
    [uint32]
    ${RouteCacheLimitEntries},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Alias('ReassemblyLimit')]
    [uint32]
    ${ReassemblyLimitBytes},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv6Protocol.IcmpRedirects]
    ${IcmpRedirects},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv6Protocol.SourceRoutingBehavior]
    ${SourceRoutingBehavior},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv6Protocol.DhcpMediaSense]
    ${DhcpMediaSense},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv6Protocol.MediaSenseEventLog]
    ${MediaSenseEventLog},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv6Protocol.MldLevel]
    ${MldLevel},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv6Protocol.MldVersion]
    ${MldVersion},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv6Protocol.MulticastForwarding]
    ${MulticastForwarding},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv6Protocol.GroupForwardedFragments]
    ${GroupForwardedFragments},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv6Protocol.RandomizeIdentifiers]
    ${RandomizeIdentifiers},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv6Protocol.AddressMaskReply]
    ${AddressMaskReply},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv6Protocol.UseTemporaryAddresses]
    ${UseTemporaryAddresses},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Alias('MaxDadAttempts')]
    [uint32]
    ${MaxTemporaryDadAttempts},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Alias('MaxValidLifetime')]
    [timespan]
    ${MaxTemporaryValidLifetime},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Alias('MaxPreferredLifetime')]
    [timespan]
    ${MaxTemporaryPreferredLifetime},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Alias('RegenerateTime')]
    [timespan]
    ${TemporaryRegenerateTime},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Alias('MaxRandomTime')]
    [timespan]
    ${MaxTemporaryDesyncTime},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Alias('Session')]
    [ValidateNotNullOrEmpty()]
    [CimSession[]]
    ${CimSession},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [int]
    ${ThrottleLimit},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [switch]
    ${AsJob},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [switch]
    ${PassThru})

    DynamicParam {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper = $script:ObjectModelWrapper::new()
                $__cmdletization_objectModelWrapper.Initialize($PSCmdlet, $script:ClassName, $script:ClassVersion, $script:ModuleVersion, $script:PrivateData)

                if ($__cmdletization_objectModelWrapper -is [System.Management.Automation.IDynamicParameters])
                {
                    ([System.Management.Automation.IDynamicParameters]$__cmdletization_objectModelWrapper).GetDynamicParameters()
                }
            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }

    Begin {
        $__cmdletization_exceptionHasBeenThrown = $false
        try 
        {
            __cmdletization_BindCommonParameters $__cmdletization_objectModelWrapper $PSBoundParameters
            $__cmdletization_objectModelWrapper.BeginProcessing()
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    Process {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
    $__cmdletization_queryBuilder = $__cmdletization_objectModelWrapper.GetQueryBuilder()


    $__cmdletization_methodParameters = [System.Collections.Generic.List[Microsoft.PowerShell.Cmdletization.MethodParameter]]::new()
    switch -exact ($PSCmdlet.ParameterSetName) { 
        { @('InputObject (cdxml)') -contains $_ } {
          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('DefaultHopLimit')) {
            [object]$__cmdletization_value = ${DefaultHopLimit}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'DefaultHopLimit'; ParameterType = 'System.UInt32'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'DefaultHopLimit'; ParameterType = 'System.UInt32'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('NeighborCacheLimitEntries')) {
            [object]$__cmdletization_value = ${NeighborCacheLimitEntries}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'NeighborCacheLimit'; ParameterType = 'System.UInt32'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'NeighborCacheLimit'; ParameterType = 'System.UInt32'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('RouteCacheLimitEntries')) {
            [object]$__cmdletization_value = ${RouteCacheLimitEntries}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'RouteCacheLimit'; ParameterType = 'System.UInt32'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'RouteCacheLimit'; ParameterType = 'System.UInt32'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('ReassemblyLimitBytes')) {
            [object]$__cmdletization_value = ${ReassemblyLimitBytes}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'ReassemblyLimit'; ParameterType = 'System.UInt32'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'ReassemblyLimit'; ParameterType = 'System.UInt32'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultVal

ScriptBlock ID: cde5ff8b-ac94-4c96-afb0-99ae759e74f0
Path:
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=3
Type=Warning
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2137812
Keywords=None
Message=Creating Scriptblock text (1 of 4):

#requires -version 3.0

try { Microsoft.PowerShell.Core\Set-StrictMode -Off } catch { }

$script:MyModule = $MyInvocation.MyCommand.ScriptBlock.Module

$script:ClassName = 'ROOT/StandardCimv2/MSFT_NetIPv6Protocol'
$script:ClassVersion = '1.0.0'
$script:ModuleVersion = '1.0.0'
$script:ObjectModelWrapper = [Microsoft.PowerShell.Cmdletization.Cim.CimCmdletAdapter]

$script:PrivateData = [System.Collections.Generic.Dictionary[string,string]]::new()

Microsoft.PowerShell.Core\Export-ModuleMember -Function @()
        

function __cmdletization_BindCommonParameters
{
    param(
        $__cmdletization_objectModelWrapper,
        $myPSBoundParameters
    )       
                

        if ($myPSBoundParameters.ContainsKey('CimSession')) { 
            $__cmdletization_objectModelWrapper.PSObject.Properties['CimSession'].Value = $myPSBoundParameters['CimSession'] 
        }
                    

        if ($myPSBoundParameters.ContainsKey('ThrottleLimit')) { 
            $__cmdletization_objectModelWrapper.PSObject.Properties['ThrottleLimit'].Value = $myPSBoundParameters['ThrottleLimit'] 
        }
                    

        if ($myPSBoundParameters.ContainsKey('AsJob')) { 
            $__cmdletization_objectModelWrapper.PSObject.Properties['AsJob'].Value = $myPSBoundParameters['AsJob'] 
        }
                    

}
                

function Get-NetIPv6Protocol
{
    [CmdletBinding(DefaultParameterSetName='ByName', PositionalBinding=$false)]
    
    [OutputType([Microsoft.Management.Infrastructure.CimInstance])]
[OutputType('Microsoft.Management.Infrastructure.CimInstance#ROOT/StandardCimv2/MSFT_NetIPv6Protocol')]

    param(
    
    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [uint32[]]
    ${DefaultHopLimit},

    [Parameter(ParameterSetName='ByName')]
    [Alias('NeighborCacheLimit')]
    [ValidateNotNull()]
    [uint32[]]
    ${NeighborCacheLimitEntries},

    [Parameter(ParameterSetName='ByName')]
    [Alias('RouteCacheLimit')]
    [ValidateNotNull()]
    [uint32[]]
    ${RouteCacheLimitEntries},

    [Parameter(ParameterSetName='ByName')]
    [Alias('ReassemblyLimit')]
    [ValidateNotNull()]
    [uint32[]]
    ${ReassemblyLimitBytes},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv6Protocol.IcmpRedirects[]]
    ${IcmpRedirects},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv6Protocol.SourceRoutingBehavior[]]
    ${SourceRoutingBehavior},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv6Protocol.DhcpMediaSense[]]
    ${DhcpMediaSense},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv6Protocol.MediaSenseEventLog[]]
    ${MediaSenseEventLog},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv6Protocol.MldLevel[]]
    ${MldLevel},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv6Protocol.MldVersion[]]
    ${MldVersion},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv6Protocol.MulticastForwarding[]]
    ${MulticastForwarding},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv6Protocol.GroupForwardedFragments[]]
    ${GroupForwardedFragments},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv6Protocol.RandomizeIdentifiers[]]
    ${RandomizeIdentifiers},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv6Protocol.AddressMaskReply[]]
    ${AddressMaskReply},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv6Protocol.UseTemporaryAddresses[]]
    ${UseTemporaryAddresses},

    [Parameter(ParameterSetName='ByName')]
    [Alias('MaxDadAttempts')]
    [ValidateNotNull()]
    [uint32[]]
    ${MaxTemporaryDadAttempts},

    [Parameter(ParameterSetName='ByName')]
    [Alias('MaxValidLifetime')]
    [ValidateNotNull()]
    [timespan[]]
    ${MaxTemporaryValidLifetime},

    [Parameter(ParameterSetName='ByName')]
    [Alias('MaxPreferredLifetime')]
    [ValidateNotNull()]
    [timespan[]]
    ${MaxTemporaryPreferredLifetime},

    [Parameter(ParameterSetName='ByName')]
    [Alias('RegenerateTime')]
    [ValidateNotNull()]
    [timespan[]]
    ${TemporaryRegenerateTime},

    [Parameter(ParameterSetName='ByName')]
    [Alias('MaxRandomTime')]
    [ValidateNotNull()]
    [timespan[]]
    ${MaxTemporaryDesyncTime},

    [Parameter(ParameterSetName='ByName')]
    [Alias('Session')]
    [ValidateNotNullOrEmpty()]
    [CimSession[]]
    ${CimSession},

    [Parameter(ParameterSetName='ByName')]
    [int]
    ${ThrottleLimit},

    [Parameter(ParameterSetName='ByName')]
    [switch]
    ${AsJob})

    DynamicParam {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper = $script:ObjectModelWrapper::new()
                $__cmdletization_objectModelWrapper.Initialize($PSCmdlet, $script:ClassName, $script:ClassVersion, $script:ModuleVersion, $script:PrivateData)

                if ($__cmdletization_objectModelWrapper -is [System.Management.Automation.IDynamicParameters])
                {
                    ([System.Management.Automation.IDynamicParameters]$__cmdletization_objectModelWrapper).GetDynamicParameters()
                }
            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }

    Begin {
        $__cmdletization_exceptionHasBeenThrown = $false
        try 
        {
            __cmdletization_BindCommonParameters $__cmdletization_objectModelWrapper $PSBoundParameters
            $__cmdletization_objectModelWrapper.BeginProcessing()
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    Process {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
    $__cmdletization_queryBuilder = $__cmdletization_objectModelWrapper.GetQueryBuilder()
    if ($PSBoundParameters.ContainsKey('DefaultHopLimit') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${DefaultHopLimit})
        $__cmdletization_queryBuilder.FilterByProperty('DefaultHopLimit', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('NeighborCacheLimitEntries') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${NeighborCacheLimitEntries})
        $__cmdletization_queryBuilder.FilterByProperty('NeighborCacheLimit', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('RouteCacheLimitEntries') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${RouteCacheLimitEntries})
        $__cmdletization_queryBuilder.FilterByProperty('RouteCacheLimit', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('ReassemblyLimitBytes') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${ReassemblyLimitBytes})
        $__cmdletization_queryBuilder.FilterByProperty('ReassemblyLimit', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('IcmpRedirects') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${IcmpRedirects})
        $__cmdletization_queryBuilder.FilterByProperty('IcmpRedirects', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('SourceRoutingBehavior') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${SourceRoutingBehavior})
        $__cmdletization_queryBuilder.FilterByProperty('SourceRoutingBehavior', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('DhcpMediaSense') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${DhcpMediaSense})
        $__cmdletization_queryBuilder.FilterByProperty('DhcpMediaSense', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('MediaSenseEventLog') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${MediaSenseEventLog})
        $__cmdletization_queryBuilder.FilterByProperty('MediaSenseEventLog', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('MldLevel') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${MldLevel})
        $__cmdletization_queryBuilder.FilterByProperty('MldLevel', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('MldVersion') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${MldVersion})
        $__cmdletization_queryBuilder.FilterByProperty('MldVersion', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('MulticastForwarding') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${MulticastForwarding})
        $__cmdletization_queryBuilder.FilterByProperty('MulticastForwarding', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('GroupForwardedFragments') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${GroupForwardedFragments})
        $__cmdletization_queryBuilder.FilterByProperty('GroupForwardedFragments', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('RandomizeIdentifiers') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${RandomizeIdentifiers})
        $__cmdletization_queryBuilder.FilterByProperty('RandomizeIdentifiers', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('AddressMaskReply') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${AddressMaskReply})
        $__cmdletization_queryBuilder.FilterByProperty('AddressMaskReply', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('UseTemporaryAddresses') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${UseTemporaryAddresses})
        $__cmdletization_queryBuilder.FilterByProperty('UseTemporaryAddresses', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('MaxTemporaryDadAttempts

ScriptBlock ID: cde5ff8b-ac94-4c96-afb0-99ae759e74f0
Path:
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137811
Keywords=None
Message=Completed invocation of ScriptBlock ID: 336becca-a003-4355-ba1e-1eb9bbcd9a94
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137810
Keywords=None
Message=Started invocation of ScriptBlock ID: 336becca-a003-4355-ba1e-1eb9bbcd9a94
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=3
Type=Warning
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2137809
Keywords=None
Message=Creating Scriptblock text (2 of 2):
on.MethodParameter]@{Name = 'NeighborCacheLimit'; ParameterType = 'System.UInt32'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('RouteCacheLimitEntries')) {
            [object]$__cmdletization_value = ${RouteCacheLimitEntries}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'RouteCacheLimit'; ParameterType = 'System.UInt32'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'RouteCacheLimit'; ParameterType = 'System.UInt32'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('ReassemblyLimitBytes')) {
            [object]$__cmdletization_value = ${ReassemblyLimitBytes}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'ReassemblyLimit'; ParameterType = 'System.UInt32'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'ReassemblyLimit'; ParameterType = 'System.UInt32'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('IcmpRedirects')) {
            [object]$__cmdletization_value = ${IcmpRedirects}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'IcmpRedirects'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv4Protocol.IcmpRedirects'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'IcmpRedirects'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv4Protocol.IcmpRedirects'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('SourceRoutingBehavior')) {
            [object]$__cmdletization_value = ${SourceRoutingBehavior}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'SourceRoutingBehavior'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv4Protocol.SourceRoutingBehavior'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'SourceRoutingBehavior'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv4Protocol.SourceRoutingBehavior'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('DhcpMediaSense')) {
            [object]$__cmdletization_value = ${DhcpMediaSense}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'DhcpMediaSense'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv4Protocol.DhcpMediaSense'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'DhcpMediaSense'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv4Protocol.DhcpMediaSense'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('MediaSenseEventLog')) {
            [object]$__cmdletization_value = ${MediaSenseEventLog}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'MediaSenseEventLog'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv4Protocol.MediaSenseEventLog'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'MediaSenseEventLog'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv4Protocol.MediaSenseEventLog'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('IGMPLevel')) {
            [object]$__cmdletization_value = ${IGMPLevel}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'MldLevel'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv4Protocol.MldLevel'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'MldLevel'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv4Protocol.MldLevel'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('IGMPVersion')) {
            [object]$__cmdletization_value = ${IGMPVersion}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'MldVersion'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv4Protocol.MldVersion'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'MldVersion'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv4Protocol.MldVersion'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('MulticastForwarding')) {
            [object]$__cmdletization_value = ${MulticastForwarding}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'MulticastForwarding'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv4Protocol.MulticastForwarding'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'MulticastForwarding'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv4Protocol.MulticastForwarding'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('GroupForwardedFragments')) {
            [object]$__cmdletization_value = ${GroupForwardedFragments}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'GroupForwardedFragments'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv4Protocol.GroupForwardedFragments'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'GroupForwardedFragments'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv4Protocol.GroupForwardedFragments'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('RandomizeIdentifiers')) {
            [object]$__cmdletization_value = ${RandomizeIdentifiers}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'RandomizeIdentifiers'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv4Protocol.RandomizeIdentifiers'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'RandomizeIdentifiers'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv4Protocol.RandomizeIdentifiers'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('AddressMaskReply')) {
            [object]$__cmdletization_value = ${AddressMaskReply}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'AddressMaskReply'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv4Protocol.AddressMaskReply'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'AddressMaskReply'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv4Protocol.AddressMaskReply'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('MinimumMtu')) {
            [object]$__cmdletization_value = ${MinimumMtu}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'MinimumMtu'; ParameterType = 'System.UInt32'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'MinimumMtu'; ParameterType = 'System.UInt32'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

      $__cmdletization_returnValue = $null
      $__cmdletization_methodInvocationInfo = [Microsoft.PowerShell.Cmdletization.MethodInvocationInfo]::new('cim:ModifyInstance', $__cmdletization_methodParameters, $__cmdletization_returnValue)
      $__cmdletization_passThru = $PSBoundParameters.ContainsKey('PassThru') -and $PassThru
            if ($PSBoundParameters.ContainsKey('InputObject')) {
                foreach ($x in $InputObject) { $__cmdletization_objectModelWrapper.ProcessRecord($x, $__cmdletization_methodInvocationInfo, $__cmdletization_PassThru) }
            } else {
                $__cmdletization_objectModelWrapper.ProcessRecord($__cmdletization_queryBuilder, $__cmdletization_methodInvocationInfo, $__cmdletization_PassThru)
            }
        }
    }

            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    End {
        try
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper.EndProcessing()
            }
        }
        catch
        {
            throw
        }
    }

    # .EXTERNALHELP MSFT_NetIPv4Protocol.cdxml-Help.xml
}
Microsoft.PowerShell.Core\Export-ModuleMember -Function 'Set-NetIPv4Protocol' -Alias '*'
        


ScriptBlock ID: 336becca-a003-4355-ba1e-1eb9bbcd9a94
Path:
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=3
Type=Warning
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2137808
Keywords=None
Message=Creating Scriptblock text (1 of 2):

#requires -version 3.0

try { Microsoft.PowerShell.Core\Set-StrictMode -Off } catch { }

$script:MyModule = $MyInvocation.MyCommand.ScriptBlock.Module

$script:ClassName = 'ROOT/StandardCimv2/MSFT_NetIPv4Protocol'
$script:ClassVersion = '1.0.0'
$script:ModuleVersion = '1.0.0'
$script:ObjectModelWrapper = [Microsoft.PowerShell.Cmdletization.Cim.CimCmdletAdapter]

$script:PrivateData = [System.Collections.Generic.Dictionary[string,string]]::new()

Microsoft.PowerShell.Core\Export-ModuleMember -Function @()
        

function __cmdletization_BindCommonParameters
{
    param(
        $__cmdletization_objectModelWrapper,
        $myPSBoundParameters
    )       
                

        if ($myPSBoundParameters.ContainsKey('CimSession')) { 
            $__cmdletization_objectModelWrapper.PSObject.Properties['CimSession'].Value = $myPSBoundParameters['CimSession'] 
        }
                    

        if ($myPSBoundParameters.ContainsKey('ThrottleLimit')) { 
            $__cmdletization_objectModelWrapper.PSObject.Properties['ThrottleLimit'].Value = $myPSBoundParameters['ThrottleLimit'] 
        }
                    

        if ($myPSBoundParameters.ContainsKey('AsJob')) { 
            $__cmdletization_objectModelWrapper.PSObject.Properties['AsJob'].Value = $myPSBoundParameters['AsJob'] 
        }
                    

}
                

function Get-NetIPv4Protocol
{
    [CmdletBinding(DefaultParameterSetName='ByName', PositionalBinding=$false)]
    
    [OutputType([Microsoft.Management.Infrastructure.CimInstance])]
[OutputType('Microsoft.Management.Infrastructure.CimInstance#ROOT/StandardCimv2/MSFT_NetIPv4Protocol')]

    param(
    
    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [uint32[]]
    ${DefaultHopLimit},

    [Parameter(ParameterSetName='ByName')]
    [Alias('NeighborCacheLimit')]
    [ValidateNotNull()]
    [uint32[]]
    ${NeighborCacheLimitEntries},

    [Parameter(ParameterSetName='ByName')]
    [Alias('RouteCacheLimit')]
    [ValidateNotNull()]
    [uint32[]]
    ${RouteCacheLimitEntries},

    [Parameter(ParameterSetName='ByName')]
    [Alias('ReassemblyLimit')]
    [ValidateNotNull()]
    [uint32[]]
    ${ReassemblyLimitBytes},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv4Protocol.IcmpRedirects[]]
    ${IcmpRedirects},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv4Protocol.SourceRoutingBehavior[]]
    ${SourceRoutingBehavior},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv4Protocol.DhcpMediaSense[]]
    ${DhcpMediaSense},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv4Protocol.MediaSenseEventLog[]]
    ${MediaSenseEventLog},

    [Parameter(ParameterSetName='ByName')]
    [Alias('MldLevel')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv4Protocol.MldLevel[]]
    ${IGMPLevel},

    [Parameter(ParameterSetName='ByName')]
    [Alias('MldVersion')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv4Protocol.MldVersion[]]
    ${IGMPVersion},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv4Protocol.MulticastForwarding[]]
    ${MulticastForwarding},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv4Protocol.GroupForwardedFragments[]]
    ${GroupForwardedFragments},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv4Protocol.RandomizeIdentifiers[]]
    ${RandomizeIdentifiers},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv4Protocol.AddressMaskReply[]]
    ${AddressMaskReply},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [uint32[]]
    ${MinimumMtu},

    [Parameter(ParameterSetName='ByName')]
    [Alias('Session')]
    [ValidateNotNullOrEmpty()]
    [CimSession[]]
    ${CimSession},

    [Parameter(ParameterSetName='ByName')]
    [int]
    ${ThrottleLimit},

    [Parameter(ParameterSetName='ByName')]
    [switch]
    ${AsJob})

    DynamicParam {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper = $script:ObjectModelWrapper::new()
                $__cmdletization_objectModelWrapper.Initialize($PSCmdlet, $script:ClassName, $script:ClassVersion, $script:ModuleVersion, $script:PrivateData)

                if ($__cmdletization_objectModelWrapper -is [System.Management.Automation.IDynamicParameters])
                {
                    ([System.Management.Automation.IDynamicParameters]$__cmdletization_objectModelWrapper).GetDynamicParameters()
                }
            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }

    Begin {
        $__cmdletization_exceptionHasBeenThrown = $false
        try 
        {
            __cmdletization_BindCommonParameters $__cmdletization_objectModelWrapper $PSBoundParameters
            $__cmdletization_objectModelWrapper.BeginProcessing()
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    Process {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
    $__cmdletization_queryBuilder = $__cmdletization_objectModelWrapper.GetQueryBuilder()
    if ($PSBoundParameters.ContainsKey('DefaultHopLimit') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${DefaultHopLimit})
        $__cmdletization_queryBuilder.FilterByProperty('DefaultHopLimit', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('NeighborCacheLimitEntries') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${NeighborCacheLimitEntries})
        $__cmdletization_queryBuilder.FilterByProperty('NeighborCacheLimit', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('RouteCacheLimitEntries') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${RouteCacheLimitEntries})
        $__cmdletization_queryBuilder.FilterByProperty('RouteCacheLimit', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('ReassemblyLimitBytes') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${ReassemblyLimitBytes})
        $__cmdletization_queryBuilder.FilterByProperty('ReassemblyLimit', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('IcmpRedirects') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${IcmpRedirects})
        $__cmdletization_queryBuilder.FilterByProperty('IcmpRedirects', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('SourceRoutingBehavior') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${SourceRoutingBehavior})
        $__cmdletization_queryBuilder.FilterByProperty('SourceRoutingBehavior', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('DhcpMediaSense') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${DhcpMediaSense})
        $__cmdletization_queryBuilder.FilterByProperty('DhcpMediaSense', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('MediaSenseEventLog') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${MediaSenseEventLog})
        $__cmdletization_queryBuilder.FilterByProperty('MediaSenseEventLog', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('IGMPLevel') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${IGMPLevel})
        $__cmdletization_queryBuilder.FilterByProperty('MldLevel', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('IGMPVersion') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${IGMPVersion})
        $__cmdletization_queryBuilder.FilterByProperty('MldVersion', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('MulticastForwarding') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${MulticastForwarding})
        $__cmdletization_queryBuilder.FilterByProperty('MulticastForwarding', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('GroupForwardedFragments') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${GroupForwardedFragments})
        $__cmdletization_queryBuilder.FilterByProperty('GroupForwardedFragments', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('RandomizeIdentifiers') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${RandomizeIdentifiers})
        $__cmdletization_queryBuilder.FilterByProperty('RandomizeIdentifiers', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('AddressMaskReply') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${AddressMaskReply})
        $__cmdletization_queryBuilder.FilterByProperty('AddressMaskReply', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('MinimumMtu') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${MinimumMtu})
        $__cmdletization_queryBuilder.FilterByProperty('MinimumMtu', $__cmdletization_values, $false, 'Default')
    }


    $__cmdletization_objectModelWrapper.ProcessRecord($__cmdletization_queryBuilder)
            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    End {
        try
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper.EndProcessing()
            }
        }
        catch
        {
            throw
        }
    }

    # .EXTERNALHELP MSFT_NetIPv4Protocol.cdxml-Help.xml
}
Microsoft.PowerShell.Core\Export-ModuleMember -Function 'Get-NetIPv4Protocol' -Alias '*'
        

function Set-NetIPv4Protocol
{
    [CmdletBinding(DefaultParameterSetName='InputObject (cdxml)', SupportsShouldProcess=$true, ConfirmImpact='Medium', PositionalBinding=$false)]
    
    [OutputType([Microsoft.Management.Infrastructure.CimInstance])]
[OutputType('Microsoft.Management.Infrastructure.CimInstance#ROOT/StandardCimv2/MSFT_NetIPv4Protocol')]

    param(
    
    [Parameter(ParameterSetName='InputObject (cdxml)', ValueFromPipeline=$true)]
    [PSTypeName('Microsoft.Management.Infrastructure.CimInstance#MSFT_NetIPv4Protocol')]
    [ValidateNotNull()]
    [ciminstance[]]
    ${InputObject},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [uint32]
    ${DefaultHopLimit},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Alias('NeighborCacheLimit')]
    [uint32]
    ${NeighborCacheLimitEntries},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Alias('RouteCacheLimit')]
    [uint32]
    ${RouteCacheLimitEntries},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Alias('ReassemblyLimit')]
    [uint32]
    ${ReassemblyLimitBytes},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv4Protocol.IcmpRedirects]
    ${IcmpRedirects},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv4Protocol.SourceRoutingBehavior]
    ${SourceRoutingBehavior},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv4Protocol.DhcpMediaSense]
    ${DhcpMediaSense},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv4Protocol.MediaSenseEventLog]
    ${MediaSenseEventLog},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Alias('MldLevel')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv4Protocol.MldLevel]
    ${IGMPLevel},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Alias('MldVersion')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv4Protocol.MldVersion]
    ${IGMPVersion},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv4Protocol.MulticastForwarding]
    ${MulticastForwarding},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv4Protocol.GroupForwardedFragments]
    ${GroupForwardedFragments},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv4Protocol.RandomizeIdentifiers]
    ${RandomizeIdentifiers},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPv4Protocol.AddressMaskReply]
    ${AddressMaskReply},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [uint32]
    ${MinimumMtu},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Alias('Session')]
    [ValidateNotNullOrEmpty()]
    [CimSession[]]
    ${CimSession},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [int]
    ${ThrottleLimit},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [switch]
    ${AsJob},

    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [switch]
    ${PassThru})

    DynamicParam {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper = $script:ObjectModelWrapper::new()
                $__cmdletization_objectModelWrapper.Initialize($PSCmdlet, $script:ClassName, $script:ClassVersion, $script:ModuleVersion, $script:PrivateData)

                if ($__cmdletization_objectModelWrapper -is [System.Management.Automation.IDynamicParameters])
                {
                    ([System.Management.Automation.IDynamicParameters]$__cmdletization_objectModelWrapper).GetDynamicParameters()
                }
            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }

    Begin {
        $__cmdletization_exceptionHasBeenThrown = $false
        try 
        {
            __cmdletization_BindCommonParameters $__cmdletization_objectModelWrapper $PSBoundParameters
            $__cmdletization_objectModelWrapper.BeginProcessing()
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    Process {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
    $__cmdletization_queryBuilder = $__cmdletization_objectModelWrapper.GetQueryBuilder()


    $__cmdletization_methodParameters = [System.Collections.Generic.List[Microsoft.PowerShell.Cmdletization.MethodParameter]]::new()
    switch -exact ($PSCmdlet.ParameterSetName) { 
        { @('InputObject (cdxml)') -contains $_ } {
          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('DefaultHopLimit')) {
            [object]$__cmdletization_value = ${DefaultHopLimit}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'DefaultHopLimit'; ParameterType = 'System.UInt32'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'DefaultHopLimit'; ParameterType = 'System.UInt32'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('NeighborCacheLimitEntries')) {
            [object]$__cmdletization_value = ${NeighborCacheLimitEntries}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'NeighborCacheLimit'; ParameterType = 'System.UInt32'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletizati

ScriptBlock ID: 336becca-a003-4355-ba1e-1eb9bbcd9a94
Path:
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137807
Keywords=None
Message=Completed invocation of ScriptBlock ID: 316bed29-9c88-4faf-acb6-3e5a7cdffe0e
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137806
Keywords=None
Message=Started invocation of ScriptBlock ID: 316bed29-9c88-4faf-acb6-3e5a7cdffe0e
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=3
Type=Warning
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2137805
Keywords=None
Message=Creating Scriptblock text (5 of 5):
ion_queryBuilder, $__cmdletization_methodInvocationInfo, $__cmdletization_PassThru)
            }
        }
    }

            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    End {
        try
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper.EndProcessing()
            }
        }
        catch
        {
            throw
        }
    }

    # .EXTERNALHELP MSFT_NetIPInterface.cdxml-Help.xml
}
Microsoft.PowerShell.Core\Export-ModuleMember -Function 'Set-NetIPInterface' -Alias '*'
        


ScriptBlock ID: 316bed29-9c88-4faf-acb6-3e5a7cdffe0e
Path:
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=3
Type=Warning
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2137804
Keywords=None
Message=Creating Scriptblock text (4 of 5):
tization.GeneratedTypes.NetIPInterface.RouterDiscovery'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'RouterDiscovery'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.RouterDiscovery'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('ManagedAddressConfiguration')) {
            [object]$__cmdletization_value = ${ManagedAddressConfiguration}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'ManagedAddressConfiguration'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.ManagedAddressConfiguration'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'ManagedAddressConfiguration'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.ManagedAddressConfiguration'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('OtherStatefulConfiguration')) {
            [object]$__cmdletization_value = ${OtherStatefulConfiguration}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'OtherStatefulConfiguration'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.OtherStatefulConfiguration'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'OtherStatefulConfiguration'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.OtherStatefulConfiguration'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('WeakHostSend')) {
            [object]$__cmdletization_value = ${WeakHostSend}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'WeakHostSend'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.WeakHostSend'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'WeakHostSend'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.WeakHostSend'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('WeakHostReceive')) {
            [object]$__cmdletization_value = ${WeakHostReceive}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'WeakHostReceive'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.WeakHostReceive'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'WeakHostReceive'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.WeakHostReceive'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('IgnoreDefaultRoutes')) {
            [object]$__cmdletization_value = ${IgnoreDefaultRoutes}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'IgnoreDefaultRoutes'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.IgnoreDefaultRoutes'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'IgnoreDefaultRoutes'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.IgnoreDefaultRoutes'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('AdvertisedRouterLifetime')) {
            [object]$__cmdletization_value = ${AdvertisedRouterLifetime}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'AdvertisedRouterLifetime'; ParameterType = 'System.TimeSpan'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'AdvertisedRouterLifetime'; ParameterType = 'System.TimeSpan'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('AdvertiseDefaultRoute')) {
            [object]$__cmdletization_value = ${AdvertiseDefaultRoute}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'AdvertiseDefaultRoute'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.AdvertiseDefaultRoute'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'AdvertiseDefaultRoute'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.AdvertiseDefaultRoute'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('CurrentHopLimit')) {
            [object]$__cmdletization_value = ${CurrentHopLimit}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'CurrentHopLimit'; ParameterType = 'System.UInt32'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'CurrentHopLimit'; ParameterType = 'System.UInt32'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('ForceArpNdWolPattern')) {
            [object]$__cmdletization_value = ${ForceArpNdWolPattern}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'ForceArpNdWolPattern'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.ForceArpNdWolPattern'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'ForceArpNdWolPattern'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.ForceArpNdWolPattern'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('DirectedMacWolPattern')) {
            [object]$__cmdletization_value = ${DirectedMacWolPattern}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'DirectedMacWolPattern'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.DirectedMacWolPattern'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'DirectedMacWolPattern'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.DirectedMacWolPattern'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('EcnMarking')) {
            [object]$__cmdletization_value = ${EcnMarking}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'EcnMarking'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.EcnMarking'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'EcnMarking'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.EcnMarking'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('Dhcp')) {
            [object]$__cmdletization_value = ${Dhcp}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'Dhcp'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.Dhcp'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'Dhcp'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.Dhcp'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('AutomaticMetric')) {
            [object]$__cmdletization_value = ${AutomaticMetric}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'AutomaticMetric'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.AutomaticMetric'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'AutomaticMetric'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.AutomaticMetric'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

      $__cmdletization_returnValue = $null
      $__cmdletization_methodInvocationInfo = [Microsoft.PowerShell.Cmdletization.MethodInvocationInfo]::new('cim:ModifyInstance', $__cmdletization_methodParameters, $__cmdletization_returnValue)
      $__cmdletization_passThru = $PSBoundParameters.ContainsKey('PassThru') -and $PassThru
            if ($PSBoundParameters.ContainsKey('InputObject')) {
                foreach ($x in $InputObject) { $__cmdletization_objectModelWrapper.ProcessRecord($x, $__cmdletization_methodInvocationInfo, $__cmdletization_PassThru) }
            } else {
                $__cmdletization_objectModelWrapper.ProcessRecord($__cmdletizat

ScriptBlock ID: 316bed29-9c88-4faf-acb6-3e5a7cdffe0e
Path:
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=3
Type=Warning
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2137803
Keywords=None
Message=Creating Scriptblock text (3 of 5):
tization.GeneratedTypes.NetIPInterface.AutomaticMetric]
    ${AutomaticMetric},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Alias('Session')]
    [ValidateNotNullOrEmpty()]
    [CimSession[]]
    ${CimSession},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [int]
    ${ThrottleLimit},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [switch]
    ${AsJob},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [switch]
    ${PassThru})

    DynamicParam {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper = $script:ObjectModelWrapper::new()
                $__cmdletization_objectModelWrapper.Initialize($PSCmdlet, $script:ClassName, $script:ClassVersion, $script:ModuleVersion, $script:PrivateData)

                if ($__cmdletization_objectModelWrapper -is [System.Management.Automation.IDynamicParameters])
                {
                    ([System.Management.Automation.IDynamicParameters]$__cmdletization_objectModelWrapper).GetDynamicParameters()
                }
            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }

    Begin {
        $__cmdletization_exceptionHasBeenThrown = $false
        try 
        {
            __cmdletization_BindCommonParameters $__cmdletization_objectModelWrapper $PSBoundParameters
            $__cmdletization_objectModelWrapper.BeginProcessing()
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    Process {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
    $__cmdletization_queryBuilder = $__cmdletization_objectModelWrapper.GetQueryBuilder()
    if ($PSBoundParameters.ContainsKey('InterfaceIndex') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${InterfaceIndex})
        $__cmdletization_queryBuilder.FilterByProperty('InterfaceIndex', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('InterfaceAlias') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${InterfaceAlias})
        $__cmdletization_queryBuilder.FilterByProperty('InterfaceAlias', $__cmdletization_values, $true, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('AddressFamily') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${AddressFamily})
        $__cmdletization_queryBuilder.FilterByProperty('AddressFamily', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('ReachableTime') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${ReachableTime})
        $__cmdletization_queryBuilder.FilterByProperty('ReachableTime', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('NeighborDiscoverySupported') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${NeighborDiscoverySupported})
        $__cmdletization_queryBuilder.FilterByProperty('NeighborDiscoverySupported', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('CompartmentId') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${CompartmentId})
        $__cmdletization_queryBuilder.FilterByProperty('CompartmentId', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('PolicyStore') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
    $__cmdletization_queryBuilder.AddQueryOption('PolicyStore', ${PolicyStore})
    }
    if ($PSBoundParameters.ContainsKey('IncludeAllCompartments') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
    $__cmdletization_queryBuilder.AddQueryOption('IncludeAllCompartments', ${IncludeAllCompartments})
    }


    $__cmdletization_methodParameters = [System.Collections.Generic.List[Microsoft.PowerShell.Cmdletization.MethodParameter]]::new()
    switch -exact ($PSCmdlet.ParameterSetName) { 
        { @('ByName', 'InputObject (cdxml)') -contains $_ } {
          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('Forwarding')) {
            [object]$__cmdletization_value = ${Forwarding}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'Forwarding'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.Forwarding'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'Forwarding'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.Forwarding'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('ClampMss')) {
            [object]$__cmdletization_value = ${ClampMss}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'ClampMss'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.ClampMss'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'ClampMss'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.ClampMss'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('Advertising')) {
            [object]$__cmdletization_value = ${Advertising}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'Advertising'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.Advertising'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'Advertising'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.Advertising'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('NlMtuBytes')) {
            [object]$__cmdletization_value = ${NlMtuBytes}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'NlMtu'; ParameterType = 'System.UInt32'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'NlMtu'; ParameterType = 'System.UInt32'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('InterfaceMetric')) {
            [object]$__cmdletization_value = ${InterfaceMetric}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'InterfaceMetric'; ParameterType = 'System.UInt32'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'InterfaceMetric'; ParameterType = 'System.UInt32'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('NeighborUnreachabilityDetection')) {
            [object]$__cmdletization_value = ${NeighborUnreachabilityDetection}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'NeighborUnreachabilityDetection'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.NeighborUnreachabilityDetection'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'NeighborUnreachabilityDetection'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.NeighborUnreachabilityDetection'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('BaseReachableTimeMs')) {
            [object]$__cmdletization_value = ${BaseReachableTimeMs}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'BaseReachableTime'; ParameterType = 'System.UInt32'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'BaseReachableTime'; ParameterType = 'System.UInt32'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('RetransmitTimeMs')) {
            [object]$__cmdletization_value = ${RetransmitTimeMs}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'RetransmitTime'; ParameterType = 'System.UInt32'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'RetransmitTime'; ParameterType = 'System.UInt32'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('DadTransmits')) {
            [object]$__cmdletization_value = ${DadTransmits}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'DadTransmits'; ParameterType = 'System.UInt32'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'DadTransmits'; ParameterType = 'System.UInt32'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('DadRetransmitTimeMs')) {
            [object]$__cmdletization_value = ${DadRetransmitTimeMs}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'DadRetransmitTime'; ParameterType = 'System.UInt32'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'DadRetransmitTime'; ParameterType = 'System.UInt32'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('RouterDiscovery')) {
            [object]$__cmdletization_value = ${RouterDiscovery}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'RouterDiscovery'; ParameterType = 'Microsoft.PowerShell.Cmdle

ScriptBlock ID: 316bed29-9c88-4faf-acb6-3e5a7cdffe0e
Path:
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=3
Type=Warning
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2137802
Keywords=None
Message=Creating Scriptblock text (2 of 5):
terByProperty('DadTransmits', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('DadRetransmitTimeMs') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${DadRetransmitTimeMs})
        $__cmdletization_queryBuilder.FilterByProperty('DadRetransmitTime', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('RouterDiscovery') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${RouterDiscovery})
        $__cmdletization_queryBuilder.FilterByProperty('RouterDiscovery', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('ManagedAddressConfiguration') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${ManagedAddressConfiguration})
        $__cmdletization_queryBuilder.FilterByProperty('ManagedAddressConfiguration', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('OtherStatefulConfiguration') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${OtherStatefulConfiguration})
        $__cmdletization_queryBuilder.FilterByProperty('OtherStatefulConfiguration', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('WeakHostSend') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${WeakHostSend})
        $__cmdletization_queryBuilder.FilterByProperty('WeakHostSend', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('WeakHostReceive') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${WeakHostReceive})
        $__cmdletization_queryBuilder.FilterByProperty('WeakHostReceive', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('IgnoreDefaultRoutes') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${IgnoreDefaultRoutes})
        $__cmdletization_queryBuilder.FilterByProperty('IgnoreDefaultRoutes', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('AdvertisedRouterLifetime') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${AdvertisedRouterLifetime})
        $__cmdletization_queryBuilder.FilterByProperty('AdvertisedRouterLifetime', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('AdvertiseDefaultRoute') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${AdvertiseDefaultRoute})
        $__cmdletization_queryBuilder.FilterByProperty('AdvertiseDefaultRoute', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('CurrentHopLimit') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${CurrentHopLimit})
        $__cmdletization_queryBuilder.FilterByProperty('CurrentHopLimit', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('ForceArpNdWolPattern') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${ForceArpNdWolPattern})
        $__cmdletization_queryBuilder.FilterByProperty('ForceArpNdWolPattern', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('DirectedMacWolPattern') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${DirectedMacWolPattern})
        $__cmdletization_queryBuilder.FilterByProperty('DirectedMacWolPattern', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('EcnMarking') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${EcnMarking})
        $__cmdletization_queryBuilder.FilterByProperty('EcnMarking', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('Dhcp') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${Dhcp})
        $__cmdletization_queryBuilder.FilterByProperty('Dhcp', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('ConnectionState') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${ConnectionState})
        $__cmdletization_queryBuilder.FilterByProperty('ConnectionState', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('AutomaticMetric') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${AutomaticMetric})
        $__cmdletization_queryBuilder.FilterByProperty('AutomaticMetric', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('NeighborDiscoverySupported') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${NeighborDiscoverySupported})
        $__cmdletization_queryBuilder.FilterByProperty('NeighborDiscoverySupported', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('CompartmentId') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${CompartmentId})
        $__cmdletization_queryBuilder.FilterByProperty('CompartmentId', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('AssociatedRoute') -and (@('ByRoute') -contains $PSCmdlet.ParameterSetName )) {
    $__cmdletization_queryBuilder.FilterByAssociatedInstance(${AssociatedRoute}, 'MSFT_NetIPInterfaceRoute', 'Dependent', 'Antecedent', 'Default')
    }
    if ($PSBoundParameters.ContainsKey('AssociatedIPAddress') -and (@('ByIPAddress') -contains $PSCmdlet.ParameterSetName )) {
    $__cmdletization_queryBuilder.FilterByAssociatedInstance(${AssociatedIPAddress}, 'MSFT_NetIPInterfaceIPAddress', 'Dependent', 'Antecedent', 'Default')
    }
    if ($PSBoundParameters.ContainsKey('AssociatedNeighbor') -and (@('ByNeighbor') -contains $PSCmdlet.ParameterSetName )) {
    $__cmdletization_queryBuilder.FilterByAssociatedInstance(${AssociatedNeighbor}, 'MSFT_NetIPInterfaceNeighbor', 'Dependent', 'Antecedent', 'Default')
    }
    if ($PSBoundParameters.ContainsKey('AssociatedAdapter') -and (@('ByAdapter') -contains $PSCmdlet.ParameterSetName )) {
    $__cmdletization_queryBuilder.FilterByAssociatedInstance(${AssociatedAdapter}, 'MSFT_NetIPInterfaceAdapter', 'Dependent', 'Antecedent', 'Default')
    }
    if ($PSBoundParameters.ContainsKey('PolicyStore') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
    $__cmdletization_queryBuilder.AddQueryOption('PolicyStore', ${PolicyStore})
    }
    if ($PSBoundParameters.ContainsKey('IncludeAllCompartments') -and (@('ByName', 'ByRoute', 'ByIPAddress', 'ByNeighbor', 'ByAdapter') -contains $PSCmdlet.ParameterSetName )) {
    $__cmdletization_queryBuilder.AddQueryOption('IncludeAllCompartments', ${IncludeAllCompartments})
    }


    $__cmdletization_objectModelWrapper.ProcessRecord($__cmdletization_queryBuilder)
            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    End {
        try
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper.EndProcessing()
            }
        }
        catch
        {
            throw
        }
    }

    # .EXTERNALHELP MSFT_NetIPInterface.cdxml-Help.xml
}
Microsoft.PowerShell.Core\Export-ModuleMember -Function 'Get-NetIPInterface' -Alias '*'
        

function Set-NetIPInterface
{
    [CmdletBinding(DefaultParameterSetName='ByName', SupportsShouldProcess=$true, ConfirmImpact='Medium', PositionalBinding=$false)]
    
    [OutputType([Microsoft.Management.Infrastructure.CimInstance])]
[OutputType('Microsoft.Management.Infrastructure.CimInstance#ROOT/StandardCimv2/MSFT_NetIPInterface')]

    param(
    
    [Parameter(ParameterSetName='ByName', ValueFromPipelineByPropertyName=$true)]
    [Alias('ifIndex')]
    [ValidateNotNull()]
    [uint32[]]
    ${InterfaceIndex},

    [Parameter(ParameterSetName='ByName', Position=0, ValueFromPipelineByPropertyName=$true)]
    [Alias('ifAlias')]
    [ValidateNotNull()]
    [string[]]
    ${InterfaceAlias},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.AddressFamily[]]
    ${AddressFamily},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [uint32[]]
    ${ReachableTime},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.NeighborDiscoverySupported[]]
    ${NeighborDiscoverySupported},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [uint32[]]
    ${CompartmentId},

    [Parameter(ParameterSetName='ByName')]
    [string]
    ${PolicyStore},

    [Parameter(ParameterSetName='ByName')]
    [switch]
    ${IncludeAllCompartments},

    [Parameter(ParameterSetName='InputObject (cdxml)', Mandatory=$true, ValueFromPipeline=$true)]
    [PSTypeName('Microsoft.Management.Infrastructure.CimInstance#MSFT_NetIPInterface')]
    [ValidateNotNull()]
    [ciminstance[]]
    ${InputObject},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.Forwarding]
    ${Forwarding},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.ClampMss]
    ${ClampMss},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.Advertising]
    ${Advertising},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [uint32]
    ${NlMtuBytes},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [uint32]
    ${InterfaceMetric},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.NeighborUnreachabilityDetection]
    ${NeighborUnreachabilityDetection},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Alias('BaseReachableTime')]
    [uint32]
    ${BaseReachableTimeMs},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Alias('RetransmitTime')]
    [uint32]
    ${RetransmitTimeMs},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [uint32]
    ${DadTransmits},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Alias('DadRetransmitTime')]
    [uint32]
    ${DadRetransmitTimeMs},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.RouterDiscovery]
    ${RouterDiscovery},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.ManagedAddressConfiguration]
    ${ManagedAddressConfiguration},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.OtherStatefulConfiguration]
    ${OtherStatefulConfiguration},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.WeakHostSend]
    ${WeakHostSend},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.WeakHostReceive]
    ${WeakHostReceive},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.IgnoreDefaultRoutes]
    ${IgnoreDefaultRoutes},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [timespan]
    ${AdvertisedRouterLifetime},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.AdvertiseDefaultRoute]
    ${AdvertiseDefaultRoute},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [uint32]
    ${CurrentHopLimit},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.ForceArpNdWolPattern]
    ${ForceArpNdWolPattern},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.DirectedMacWolPattern]
    ${DirectedMacWolPattern},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.EcnMarking]
    ${EcnMarking},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.Dhcp]
    ${Dhcp},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Microsoft.PowerShell.Cmdle

ScriptBlock ID: 316bed29-9c88-4faf-acb6-3e5a7cdffe0e
Path:
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=3
Type=Warning
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2137801
Keywords=None
Message=Creating Scriptblock text (1 of 5):

#requires -version 3.0

try { Microsoft.PowerShell.Core\Set-StrictMode -Off } catch { }

$script:MyModule = $MyInvocation.MyCommand.ScriptBlock.Module

$script:ClassName = 'ROOT/StandardCimv2/MSFT_NetIPInterface'
$script:ClassVersion = '1.0.0'
$script:ModuleVersion = '1.0.0'
$script:ObjectModelWrapper = [Microsoft.PowerShell.Cmdletization.Cim.CimCmdletAdapter]

$script:PrivateData = [System.Collections.Generic.Dictionary[string,string]]::new()

Microsoft.PowerShell.Core\Export-ModuleMember -Function @()
        

function __cmdletization_BindCommonParameters
{
    param(
        $__cmdletization_objectModelWrapper,
        $myPSBoundParameters
    )       
                

        if ($myPSBoundParameters.ContainsKey('CimSession')) { 
            $__cmdletization_objectModelWrapper.PSObject.Properties['CimSession'].Value = $myPSBoundParameters['CimSession'] 
        }
                    

        if ($myPSBoundParameters.ContainsKey('ThrottleLimit')) { 
            $__cmdletization_objectModelWrapper.PSObject.Properties['ThrottleLimit'].Value = $myPSBoundParameters['ThrottleLimit'] 
        }
                    

        if ($myPSBoundParameters.ContainsKey('AsJob')) { 
            $__cmdletization_objectModelWrapper.PSObject.Properties['AsJob'].Value = $myPSBoundParameters['AsJob'] 
        }
                    

}
                

function Get-NetIPInterface
{
    [CmdletBinding(DefaultParameterSetName='ByName', PositionalBinding=$false)]
    
    [OutputType([Microsoft.Management.Infrastructure.CimInstance])]
[OutputType('Microsoft.Management.Infrastructure.CimInstance#ROOT/StandardCimv2/MSFT_NetIPInterface')]

    param(
    
    [Parameter(ParameterSetName='ByName', ValueFromPipelineByPropertyName=$true)]
    [Alias('ifIndex')]
    [ValidateNotNull()]
    [uint32[]]
    ${InterfaceIndex},

    [Parameter(ParameterSetName='ByName', Position=0, ValueFromPipelineByPropertyName=$true)]
    [Alias('ifAlias')]
    [ValidateNotNull()]
    [string[]]
    ${InterfaceAlias},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.AddressFamily[]]
    ${AddressFamily},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.Forwarding[]]
    ${Forwarding},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.ClampMss[]]
    ${ClampMss},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.Advertising[]]
    ${Advertising},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [uint32[]]
    ${NlMtuBytes},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [uint32[]]
    ${InterfaceMetric},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.NeighborUnreachabilityDetection[]]
    ${NeighborUnreachabilityDetection},

    [Parameter(ParameterSetName='ByName')]
    [Alias('BaseReachableTime')]
    [ValidateNotNull()]
    [uint32[]]
    ${BaseReachableTimeMs},

    [Parameter(ParameterSetName='ByName')]
    [Alias('ReachableTime')]
    [ValidateNotNull()]
    [uint32[]]
    ${ReachableTimeMs},

    [Parameter(ParameterSetName='ByName')]
    [Alias('RetransmitTime')]
    [ValidateNotNull()]
    [uint32[]]
    ${RetransmitTimeMs},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [uint32[]]
    ${DadTransmits},

    [Parameter(ParameterSetName='ByName')]
    [Alias('DadRetransmitTime')]
    [ValidateNotNull()]
    [uint32[]]
    ${DadRetransmitTimeMs},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.RouterDiscovery[]]
    ${RouterDiscovery},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.ManagedAddressConfiguration[]]
    ${ManagedAddressConfiguration},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.OtherStatefulConfiguration[]]
    ${OtherStatefulConfiguration},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.WeakHostSend[]]
    ${WeakHostSend},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.WeakHostReceive[]]
    ${WeakHostReceive},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.IgnoreDefaultRoutes[]]
    ${IgnoreDefaultRoutes},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [timespan[]]
    ${AdvertisedRouterLifetime},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.AdvertiseDefaultRoute[]]
    ${AdvertiseDefaultRoute},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [uint32[]]
    ${CurrentHopLimit},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.ForceArpNdWolPattern[]]
    ${ForceArpNdWolPattern},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.DirectedMacWolPattern[]]
    ${DirectedMacWolPattern},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.EcnMarking[]]
    ${EcnMarking},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.Dhcp[]]
    ${Dhcp},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.ConnectionState[]]
    ${ConnectionState},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.AutomaticMetric[]]
    ${AutomaticMetric},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPInterface.NeighborDiscoverySupported[]]
    ${NeighborDiscoverySupported},

    [Parameter(ParameterSetName='ByName')]
    [ValidateNotNull()]
    [uint32[]]
    ${CompartmentId},

    [Parameter(ParameterSetName='ByRoute', ValueFromPipeline=$true)]
    [PSTypeName('Microsoft.Management.Infrastructure.CimInstance#root/standardcimv2/MSFT_NetRoute')]
    [ValidateNotNull()]
    [ciminstance]
    ${AssociatedRoute},

    [Parameter(ParameterSetName='ByIPAddress', ValueFromPipeline=$true)]
    [PSTypeName('Microsoft.Management.Infrastructure.CimInstance#root/standardcimv2/MSFT_NetIPAddress')]
    [ValidateNotNull()]
    [ciminstance]
    ${AssociatedIPAddress},

    [Parameter(ParameterSetName='ByNeighbor', ValueFromPipeline=$true)]
    [PSTypeName('Microsoft.Management.Infrastructure.CimInstance#root/standardcimv2/MSFT_NetNeighbor')]
    [ValidateNotNull()]
    [ciminstance]
    ${AssociatedNeighbor},

    [Parameter(ParameterSetName='ByAdapter', ValueFromPipeline=$true)]
    [PSTypeName('Microsoft.Management.Infrastructure.CimInstance#root/standardcimv2/MSFT_NetAdapter')]
    [ValidateNotNull()]
    [ciminstance]
    ${AssociatedAdapter},

    [Parameter(ParameterSetName='ByName')]
    [string]
    ${PolicyStore},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='ByRoute')]
    [Parameter(ParameterSetName='ByIPAddress')]
    [Parameter(ParameterSetName='ByNeighbor')]
    [Parameter(ParameterSetName='ByAdapter')]
    [switch]
    ${IncludeAllCompartments},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='ByRoute')]
    [Parameter(ParameterSetName='ByIPAddress')]
    [Parameter(ParameterSetName='ByNeighbor')]
    [Parameter(ParameterSetName='ByAdapter')]
    [Alias('Session')]
    [ValidateNotNullOrEmpty()]
    [CimSession[]]
    ${CimSession},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='ByRoute')]
    [Parameter(ParameterSetName='ByIPAddress')]
    [Parameter(ParameterSetName='ByNeighbor')]
    [Parameter(ParameterSetName='ByAdapter')]
    [int]
    ${ThrottleLimit},

    [Parameter(ParameterSetName='ByName')]
    [Parameter(ParameterSetName='ByRoute')]
    [Parameter(ParameterSetName='ByIPAddress')]
    [Parameter(ParameterSetName='ByNeighbor')]
    [Parameter(ParameterSetName='ByAdapter')]
    [switch]
    ${AsJob})

    DynamicParam {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper = $script:ObjectModelWrapper::new()
                $__cmdletization_objectModelWrapper.Initialize($PSCmdlet, $script:ClassName, $script:ClassVersion, $script:ModuleVersion, $script:PrivateData)

                if ($__cmdletization_objectModelWrapper -is [System.Management.Automation.IDynamicParameters])
                {
                    ([System.Management.Automation.IDynamicParameters]$__cmdletization_objectModelWrapper).GetDynamicParameters()
                }
            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }

    Begin {
        $__cmdletization_exceptionHasBeenThrown = $false
        try 
        {
            __cmdletization_BindCommonParameters $__cmdletization_objectModelWrapper $PSBoundParameters
            $__cmdletization_objectModelWrapper.BeginProcessing()
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    Process {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
    $__cmdletization_queryBuilder = $__cmdletization_objectModelWrapper.GetQueryBuilder()
    if ($PSBoundParameters.ContainsKey('InterfaceIndex') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${InterfaceIndex})
        $__cmdletization_queryBuilder.FilterByProperty('InterfaceIndex', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('InterfaceAlias') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${InterfaceAlias})
        $__cmdletization_queryBuilder.FilterByProperty('InterfaceAlias', $__cmdletization_values, $true, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('AddressFamily') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${AddressFamily})
        $__cmdletization_queryBuilder.FilterByProperty('AddressFamily', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('Forwarding') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${Forwarding})
        $__cmdletization_queryBuilder.FilterByProperty('Forwarding', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('ClampMss') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${ClampMss})
        $__cmdletization_queryBuilder.FilterByProperty('ClampMss', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('Advertising') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${Advertising})
        $__cmdletization_queryBuilder.FilterByProperty('Advertising', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('NlMtuBytes') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${NlMtuBytes})
        $__cmdletization_queryBuilder.FilterByProperty('NlMtu', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('InterfaceMetric') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${InterfaceMetric})
        $__cmdletization_queryBuilder.FilterByProperty('InterfaceMetric', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('NeighborUnreachabilityDetection') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${NeighborUnreachabilityDetection})
        $__cmdletization_queryBuilder.FilterByProperty('NeighborUnreachabilityDetection', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('BaseReachableTimeMs') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${BaseReachableTimeMs})
        $__cmdletization_queryBuilder.FilterByProperty('BaseReachableTime', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('ReachableTimeMs') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${ReachableTimeMs})
        $__cmdletization_queryBuilder.FilterByProperty('ReachableTime', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('RetransmitTimeMs') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${RetransmitTimeMs})
        $__cmdletization_queryBuilder.FilterByProperty('RetransmitTime', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('DadTransmits') -and (@('ByName') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${DadTransmits})
        $__cmdletization_queryBuilder.Fil

ScriptBlock ID: 316bed29-9c88-4faf-acb6-3e5a7cdffe0e
Path:
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137800
Keywords=None
Message=Completed invocation of ScriptBlock ID: b97ad571-effb-4e50-a29d-07e825bae79e
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137799
Keywords=None
Message=Started invocation of ScriptBlock ID: b97ad571-effb-4e50-a29d-07e825bae79e
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=3
Type=Warning
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2137798
Keywords=None
Message=Creating Scriptblock text (5 of 5):
lidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPAddress.PrefixOrigin[]]
    ${PrefixOrigin},

    [Parameter(ParameterSetName='Query (cdxml)')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPAddress.SuffixOrigin[]]
    ${SuffixOrigin},

    [Parameter(ParameterSetName='Query (cdxml)')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPAddress.AddressState[]]
    ${AddressState},

    [Parameter(ParameterSetName='Query (cdxml)')]
    [ValidateNotNull()]
    [timespan[]]
    ${ValidLifetime},

    [Parameter(ParameterSetName='Query (cdxml)')]
    [ValidateNotNull()]
    [timespan[]]
    ${PreferredLifetime},

    [Parameter(ParameterSetName='Query (cdxml)')]
    [ValidateNotNull()]
    [bool[]]
    ${SkipAsSource},

    [Parameter(ParameterSetName='Query (cdxml)')]
    [string]
    ${PolicyStore},

    [Parameter(ParameterSetName='Query (cdxml)')]
    [string]
    ${DefaultGateway},

    [Parameter(ParameterSetName='Query (cdxml)')]
    [switch]
    ${IncludeAllCompartments},

    [Parameter(ParameterSetName='InputObject (cdxml)', Mandatory=$true, ValueFromPipeline=$true)]
    [PSTypeName('Microsoft.Management.Infrastructure.CimInstance#MSFT_NetIPAddress')]
    [ValidateNotNull()]
    [ciminstance[]]
    ${InputObject},

    [Parameter(ParameterSetName='Query (cdxml)')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Alias('Session')]
    [ValidateNotNullOrEmpty()]
    [CimSession[]]
    ${CimSession},

    [Parameter(ParameterSetName='Query (cdxml)')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [int]
    ${ThrottleLimit},

    [Parameter(ParameterSetName='Query (cdxml)')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [switch]
    ${AsJob},

    [Parameter(ParameterSetName='Query (cdxml)')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [switch]
    ${PassThru})

    DynamicParam {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper = $script:ObjectModelWrapper::new()
                $__cmdletization_objectModelWrapper.Initialize($PSCmdlet, $script:ClassName, $script:ClassVersion, $script:ModuleVersion, $script:PrivateData)

                if ($__cmdletization_objectModelWrapper -is [System.Management.Automation.IDynamicParameters])
                {
                    ([System.Management.Automation.IDynamicParameters]$__cmdletization_objectModelWrapper).GetDynamicParameters()
                }
            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }

    Begin {
        $__cmdletization_exceptionHasBeenThrown = $false
        try 
        {
            __cmdletization_BindCommonParameters $__cmdletization_objectModelWrapper $PSBoundParameters
            $__cmdletization_objectModelWrapper.BeginProcessing()
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    Process {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
    $__cmdletization_queryBuilder = $__cmdletization_objectModelWrapper.GetQueryBuilder()
    if ($PSBoundParameters.ContainsKey('IPAddress') -and (@('Query (cdxml)') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${IPAddress})
        $__cmdletization_queryBuilder.FilterByProperty('IPAddress', $__cmdletization_values, $true, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('InterfaceIndex') -and (@('Query (cdxml)') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${InterfaceIndex})
        $__cmdletization_queryBuilder.FilterByProperty('InterfaceIndex', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('InterfaceAlias') -and (@('Query (cdxml)') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${InterfaceAlias})
        $__cmdletization_queryBuilder.FilterByProperty('InterfaceAlias', $__cmdletization_values, $true, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('AddressFamily') -and (@('Query (cdxml)') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${AddressFamily})
        $__cmdletization_queryBuilder.FilterByProperty('AddressFamily', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('Type') -and (@('Query (cdxml)') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${Type})
        $__cmdletization_queryBuilder.FilterByProperty('Type', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('PrefixLength') -and (@('Query (cdxml)') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${PrefixLength})
        $__cmdletization_queryBuilder.FilterByProperty('PrefixLength', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('PrefixOrigin') -and (@('Query (cdxml)') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${PrefixOrigin})
        $__cmdletization_queryBuilder.FilterByProperty('PrefixOrigin', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('SuffixOrigin') -and (@('Query (cdxml)') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${SuffixOrigin})
        $__cmdletization_queryBuilder.FilterByProperty('SuffixOrigin', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('AddressState') -and (@('Query (cdxml)') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${AddressState})
        $__cmdletization_queryBuilder.FilterByProperty('AddressState', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('ValidLifetime') -and (@('Query (cdxml)') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${ValidLifetime})
        $__cmdletization_queryBuilder.FilterByProperty('ValidLifetime', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('PreferredLifetime') -and (@('Query (cdxml)') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${PreferredLifetime})
        $__cmdletization_queryBuilder.FilterByProperty('PreferredLifetime', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('SkipAsSource') -and (@('Query (cdxml)') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${SkipAsSource})
        $__cmdletization_queryBuilder.FilterByProperty('SkipAsSource', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('PolicyStore') -and (@('Query (cdxml)') -contains $PSCmdlet.ParameterSetName )) {
    $__cmdletization_queryBuilder.AddQueryOption('PolicyStore', ${PolicyStore})
    }
    if ($PSBoundParameters.ContainsKey('DefaultGateway') -and (@('Query (cdxml)') -contains $PSCmdlet.ParameterSetName )) {
    $__cmdletization_queryBuilder.AddQueryOption('DefaultGateway', ${DefaultGateway})
    }
    if ($PSBoundParameters.ContainsKey('IncludeAllCompartments') -and (@('Query (cdxml)') -contains $PSCmdlet.ParameterSetName )) {
    $__cmdletization_queryBuilder.AddQueryOption('IncludeAllCompartments', ${IncludeAllCompartments})
    }


    $__cmdletization_methodParameters = [System.Collections.Generic.List[Microsoft.PowerShell.Cmdletization.MethodParameter]]::new()
    switch -exact ($PSCmdlet.ParameterSetName) { 
        { @('Query (cdxml)', 'InputObject (cdxml)') -contains $_ } {
      $__cmdletization_returnValue = $null
      $__cmdletization_methodInvocationInfo = [Microsoft.PowerShell.Cmdletization.MethodInvocationInfo]::new('cim:DeleteInstance', $__cmdletization_methodParameters, $__cmdletization_returnValue)
      $__cmdletization_passThru = $PSBoundParameters.ContainsKey('PassThru') -and $PassThru
            if ($PSBoundParameters.ContainsKey('InputObject')) {
                foreach ($x in $InputObject) { $__cmdletization_objectModelWrapper.ProcessRecord($x, $__cmdletization_methodInvocationInfo, $__cmdletization_PassThru) }
            } else {
                $__cmdletization_objectModelWrapper.ProcessRecord($__cmdletization_queryBuilder, $__cmdletization_methodInvocationInfo, $__cmdletization_PassThru)
            }
        }
    }

            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    End {
        try
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper.EndProcessing()
            }
        }
        catch
        {
            throw
        }
    }

    # .EXTERNALHELP MSFT_NetIPAddress.cdxml-Help.xml
}
Microsoft.PowerShell.Core\Export-ModuleMember -Function 'Remove-NetIPAddress' -Alias '*'
        


ScriptBlock ID: b97ad571-effb-4e50-a29d-07e825bae79e
Path:
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=3
Type=Warning
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2137797
Keywords=None
Message=Creating Scriptblock text (4 of 5):
},

    [Parameter(ParameterSetName='Query (cdxml)')]
    [switch]
    ${IncludeAllCompartments},

    [Parameter(ParameterSetName='InputObject (cdxml)', Mandatory=$true, ValueFromPipeline=$true)]
    [PSTypeName('Microsoft.Management.Infrastructure.CimInstance#MSFT_NetIPAddress')]
    [ValidateNotNull()]
    [ciminstance[]]
    ${InputObject},

    [Parameter(ParameterSetName='Query (cdxml)')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [byte]
    ${PrefixLength},

    [Parameter(ParameterSetName='Query (cdxml)')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [timespan]
    ${ValidLifetime},

    [Parameter(ParameterSetName='Query (cdxml)')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [timespan]
    ${PreferredLifetime},

    [Parameter(ParameterSetName='Query (cdxml)')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [bool]
    ${SkipAsSource},

    [Parameter(ParameterSetName='Query (cdxml)')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [Alias('Session')]
    [ValidateNotNullOrEmpty()]
    [CimSession[]]
    ${CimSession},

    [Parameter(ParameterSetName='Query (cdxml)')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [int]
    ${ThrottleLimit},

    [Parameter(ParameterSetName='Query (cdxml)')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [switch]
    ${AsJob},

    [Parameter(ParameterSetName='Query (cdxml)')]
    [Parameter(ParameterSetName='InputObject (cdxml)')]
    [switch]
    ${PassThru})

    DynamicParam {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper = $script:ObjectModelWrapper::new()
                $__cmdletization_objectModelWrapper.Initialize($PSCmdlet, $script:ClassName, $script:ClassVersion, $script:ModuleVersion, $script:PrivateData)

                if ($__cmdletization_objectModelWrapper -is [System.Management.Automation.IDynamicParameters])
                {
                    ([System.Management.Automation.IDynamicParameters]$__cmdletization_objectModelWrapper).GetDynamicParameters()
                }
            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }

    Begin {
        $__cmdletization_exceptionHasBeenThrown = $false
        try 
        {
            __cmdletization_BindCommonParameters $__cmdletization_objectModelWrapper $PSBoundParameters
            $__cmdletization_objectModelWrapper.BeginProcessing()
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    Process {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
    $__cmdletization_queryBuilder = $__cmdletization_objectModelWrapper.GetQueryBuilder()
    if ($PSBoundParameters.ContainsKey('IPAddress') -and (@('Query (cdxml)') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${IPAddress})
        $__cmdletization_queryBuilder.FilterByProperty('IPAddress', $__cmdletization_values, $true, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('InterfaceIndex') -and (@('Query (cdxml)') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${InterfaceIndex})
        $__cmdletization_queryBuilder.FilterByProperty('InterfaceIndex', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('InterfaceAlias') -and (@('Query (cdxml)') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${InterfaceAlias})
        $__cmdletization_queryBuilder.FilterByProperty('InterfaceAlias', $__cmdletization_values, $true, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('AddressFamily') -and (@('Query (cdxml)') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${AddressFamily})
        $__cmdletization_queryBuilder.FilterByProperty('AddressFamily', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('Type') -and (@('Query (cdxml)') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${Type})
        $__cmdletization_queryBuilder.FilterByProperty('Type', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('PrefixOrigin') -and (@('Query (cdxml)') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${PrefixOrigin})
        $__cmdletization_queryBuilder.FilterByProperty('PrefixOrigin', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('SuffixOrigin') -and (@('Query (cdxml)') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${SuffixOrigin})
        $__cmdletization_queryBuilder.FilterByProperty('SuffixOrigin', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('AddressState') -and (@('Query (cdxml)') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${AddressState})
        $__cmdletization_queryBuilder.FilterByProperty('AddressState', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('PolicyStore') -and (@('Query (cdxml)') -contains $PSCmdlet.ParameterSetName )) {
    $__cmdletization_queryBuilder.AddQueryOption('PolicyStore', ${PolicyStore})
    }
    if ($PSBoundParameters.ContainsKey('IncludeAllCompartments') -and (@('Query (cdxml)') -contains $PSCmdlet.ParameterSetName )) {
    $__cmdletization_queryBuilder.AddQueryOption('IncludeAllCompartments', ${IncludeAllCompartments})
    }


    $__cmdletization_methodParameters = [System.Collections.Generic.List[Microsoft.PowerShell.Cmdletization.MethodParameter]]::new()
    switch -exact ($PSCmdlet.ParameterSetName) { 
        { @('Query (cdxml)', 'InputObject (cdxml)') -contains $_ } {
          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('PrefixLength')) {
            [object]$__cmdletization_value = ${PrefixLength}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'PrefixLength'; ParameterType = 'System.Byte'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'PrefixLength'; ParameterType = 'System.Byte'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('ValidLifetime')) {
            [object]$__cmdletization_value = ${ValidLifetime}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'ValidLifetime'; ParameterType = 'System.TimeSpan'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'ValidLifetime'; ParameterType = 'System.TimeSpan'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('PreferredLifetime')) {
            [object]$__cmdletization_value = ${PreferredLifetime}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'PreferredLifetime'; ParameterType = 'System.TimeSpan'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'PreferredLifetime'; ParameterType = 'System.TimeSpan'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

          [object]$__cmdletization_defaultValue = $null
          [object]$__cmdletization_defaultValueIsPresent = $false
          if ($PSBoundParameters.ContainsKey('SkipAsSource')) {
            [object]$__cmdletization_value = ${SkipAsSource}
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'SkipAsSource'; ParameterType = 'System.Boolean'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
          } else {
            $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'SkipAsSource'; ParameterType = 'System.Boolean'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
          }
          $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

      $__cmdletization_returnValue = $null
      $__cmdletization_methodInvocationInfo = [Microsoft.PowerShell.Cmdletization.MethodInvocationInfo]::new('cim:ModifyInstance', $__cmdletization_methodParameters, $__cmdletization_returnValue)
      $__cmdletization_passThru = $PSBoundParameters.ContainsKey('PassThru') -and $PassThru
            if ($PSBoundParameters.ContainsKey('InputObject')) {
                foreach ($x in $InputObject) { $__cmdletization_objectModelWrapper.ProcessRecord($x, $__cmdletization_methodInvocationInfo, $__cmdletization_PassThru) }
            } else {
                $__cmdletization_objectModelWrapper.ProcessRecord($__cmdletization_queryBuilder, $__cmdletization_methodInvocationInfo, $__cmdletization_PassThru)
            }
        }
    }

            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    End {
        try
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper.EndProcessing()
            }
        }
        catch
        {
            throw
        }
    }

    # .EXTERNALHELP MSFT_NetIPAddress.cdxml-Help.xml
}
Microsoft.PowerShell.Core\Export-ModuleMember -Function 'Set-NetIPAddress' -Alias '*'
        

function Remove-NetIPAddress
{
    [CmdletBinding(DefaultParameterSetName='Query (cdxml)', SupportsShouldProcess=$true, ConfirmImpact='High', PositionalBinding=$false)]
    
    [OutputType([Microsoft.Management.Infrastructure.CimInstance])]
[OutputType('Microsoft.Management.Infrastructure.CimInstance#ROOT/StandardCimv2/MSFT_NetIPAddress')]

    param(
    
    [Parameter(ParameterSetName='Query (cdxml)', Position=0, ValueFromPipelineByPropertyName=$true)]
    [Alias('LocalAddress')]
    [ValidateNotNull()]
    [string[]]
    ${IPAddress},

    [Parameter(ParameterSetName='Query (cdxml)', ValueFromPipelineByPropertyName=$true)]
    [Alias('ifIndex')]
    [ValidateNotNull()]
    [uint32[]]
    ${InterfaceIndex},

    [Parameter(ParameterSetName='Query (cdxml)', ValueFromPipelineByPropertyName=$true)]
    [Alias('ifAlias')]
    [ValidateNotNull()]
    [string[]]
    ${InterfaceAlias},

    [Parameter(ParameterSetName='Query (cdxml)')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPAddress.AddressFamily[]]
    ${AddressFamily},

    [Parameter(ParameterSetName='Query (cdxml)')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPAddress.Type[]]
    ${Type},

    [Parameter(ParameterSetName='Query (cdxml)')]
    [ValidateNotNull()]
    [byte[]]
    ${PrefixLength},

    [Parameter(ParameterSetName='Query (cdxml)')]
    [Va

ScriptBlock ID: b97ad571-effb-4e50-a29d-07e825bae79e
Path:
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=3
Type=Warning
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2137796
Keywords=None
Message=Creating Scriptblock text (3 of 5):
osoft.PowerShell.Cmdletization.MethodParameter]@{ Name = 'ReturnValue'; ParameterType = 'System.UInt32'; Bindings = 'Error'; Value = $null; IsValuePresent = $false }
      $__cmdletization_methodInvocationInfo = [Microsoft.PowerShell.Cmdletization.MethodInvocationInfo]::new('Create', $__cmdletization_methodParameters, $__cmdletization_returnValue)
      $__cmdletization_objectModelWrapper.ProcessRecord($__cmdletization_methodInvocationInfo)
        }
    }

            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    End {
        try
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper.EndProcessing()
            }
        }
        catch
        {
            throw
        }
    }

    # .EXTERNALHELP MSFT_NetIPAddress.cdxml-Help.xml
}
Microsoft.PowerShell.Core\Export-ModuleMember -Function 'New-NetIPAddress' -Alias '*'
        

function Get-NetIPAddress
{
    [CmdletBinding(DefaultParameterSetName='Query (cdxml)', PositionalBinding=$false)]
    
    [OutputType([Microsoft.Management.Infrastructure.CimInstance])]
[OutputType('Microsoft.Management.Infrastructure.CimInstance#ROOT/StandardCimv2/MSFT_NetIPAddress')]

    param(
    
    [Parameter(ParameterSetName='Query (cdxml)', Position=0, ValueFromPipelineByPropertyName=$true)]
    [Alias('LocalAddress')]
    [ValidateNotNull()]
    [string[]]
    ${IPAddress},

    [Parameter(ParameterSetName='Query (cdxml)', ValueFromPipelineByPropertyName=$true)]
    [Alias('ifIndex')]
    [ValidateNotNull()]
    [uint32[]]
    ${InterfaceIndex},

    [Parameter(ParameterSetName='Query (cdxml)', ValueFromPipelineByPropertyName=$true)]
    [Alias('ifAlias')]
    [ValidateNotNull()]
    [string[]]
    ${InterfaceAlias},

    [Parameter(ParameterSetName='Query (cdxml)')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPAddress.AddressFamily[]]
    ${AddressFamily},

    [Parameter(ParameterSetName='Query (cdxml)')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPAddress.Type[]]
    ${Type},

    [Parameter(ParameterSetName='Query (cdxml)')]
    [ValidateNotNull()]
    [byte[]]
    ${PrefixLength},

    [Parameter(ParameterSetName='Query (cdxml)')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPAddress.PrefixOrigin[]]
    ${PrefixOrigin},

    [Parameter(ParameterSetName='Query (cdxml)')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPAddress.SuffixOrigin[]]
    ${SuffixOrigin},

    [Parameter(ParameterSetName='Query (cdxml)')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPAddress.AddressState[]]
    ${AddressState},

    [Parameter(ParameterSetName='Query (cdxml)')]
    [ValidateNotNull()]
    [timespan[]]
    ${ValidLifetime},

    [Parameter(ParameterSetName='Query (cdxml)')]
    [ValidateNotNull()]
    [timespan[]]
    ${PreferredLifetime},

    [Parameter(ParameterSetName='Query (cdxml)')]
    [ValidateNotNull()]
    [bool[]]
    ${SkipAsSource},

    [Parameter(ParameterSetName='Query (cdxml)', ValueFromPipeline=$true)]
    [PSTypeName('Microsoft.Management.Infrastructure.CimInstance#root/standardcimv2/MSFT_NetIPInterface')]
    [ValidateNotNull()]
    [ciminstance]
    ${AssociatedIPInterface},

    [Parameter(ParameterSetName='Query (cdxml)')]
    [string]
    ${PolicyStore},

    [Parameter(ParameterSetName='Query (cdxml)')]
    [switch]
    ${IncludeAllCompartments},

    [Parameter(ParameterSetName='Query (cdxml)')]
    [Alias('Session')]
    [ValidateNotNullOrEmpty()]
    [CimSession[]]
    ${CimSession},

    [Parameter(ParameterSetName='Query (cdxml)')]
    [int]
    ${ThrottleLimit},

    [Parameter(ParameterSetName='Query (cdxml)')]
    [switch]
    ${AsJob})

    DynamicParam {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper = $script:ObjectModelWrapper::new()
                $__cmdletization_objectModelWrapper.Initialize($PSCmdlet, $script:ClassName, $script:ClassVersion, $script:ModuleVersion, $script:PrivateData)

                if ($__cmdletization_objectModelWrapper -is [System.Management.Automation.IDynamicParameters])
                {
                    ([System.Management.Automation.IDynamicParameters]$__cmdletization_objectModelWrapper).GetDynamicParameters()
                }
            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }

    Begin {
        $__cmdletization_exceptionHasBeenThrown = $false
        try 
        {
            __cmdletization_BindCommonParameters $__cmdletization_objectModelWrapper $PSBoundParameters
            $__cmdletization_objectModelWrapper.BeginProcessing()
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    Process {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
    $__cmdletization_queryBuilder = $__cmdletization_objectModelWrapper.GetQueryBuilder()
    if ($PSBoundParameters.ContainsKey('IPAddress') -and (@('Query (cdxml)') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${IPAddress})
        $__cmdletization_queryBuilder.FilterByProperty('IPAddress', $__cmdletization_values, $true, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('InterfaceIndex') -and (@('Query (cdxml)') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${InterfaceIndex})
        $__cmdletization_queryBuilder.FilterByProperty('InterfaceIndex', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('InterfaceAlias') -and (@('Query (cdxml)') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${InterfaceAlias})
        $__cmdletization_queryBuilder.FilterByProperty('InterfaceAlias', $__cmdletization_values, $true, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('AddressFamily') -and (@('Query (cdxml)') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${AddressFamily})
        $__cmdletization_queryBuilder.FilterByProperty('AddressFamily', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('Type') -and (@('Query (cdxml)') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${Type})
        $__cmdletization_queryBuilder.FilterByProperty('Type', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('PrefixLength') -and (@('Query (cdxml)') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${PrefixLength})
        $__cmdletization_queryBuilder.FilterByProperty('PrefixLength', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('PrefixOrigin') -and (@('Query (cdxml)') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${PrefixOrigin})
        $__cmdletization_queryBuilder.FilterByProperty('PrefixOrigin', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('SuffixOrigin') -and (@('Query (cdxml)') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${SuffixOrigin})
        $__cmdletization_queryBuilder.FilterByProperty('SuffixOrigin', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('AddressState') -and (@('Query (cdxml)') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${AddressState})
        $__cmdletization_queryBuilder.FilterByProperty('AddressState', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('ValidLifetime') -and (@('Query (cdxml)') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${ValidLifetime})
        $__cmdletization_queryBuilder.FilterByProperty('ValidLifetime', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('PreferredLifetime') -and (@('Query (cdxml)') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${PreferredLifetime})
        $__cmdletization_queryBuilder.FilterByProperty('PreferredLifetime', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('SkipAsSource') -and (@('Query (cdxml)') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${SkipAsSource})
        $__cmdletization_queryBuilder.FilterByProperty('SkipAsSource', $__cmdletization_values, $false, 'Default')
    }
    if ($PSBoundParameters.ContainsKey('AssociatedIPInterface') -and (@('Query (cdxml)') -contains $PSCmdlet.ParameterSetName )) {
    $__cmdletization_queryBuilder.FilterByAssociatedInstance(${AssociatedIPInterface}, 'MSFT_NetIPInterfaceIPAddress', 'Antecedent', 'Dependent', 'Default')
    }
    if ($PSBoundParameters.ContainsKey('PolicyStore') -and (@('Query (cdxml)') -contains $PSCmdlet.ParameterSetName )) {
    $__cmdletization_queryBuilder.AddQueryOption('PolicyStore', ${PolicyStore})
    }
    if ($PSBoundParameters.ContainsKey('IncludeAllCompartments') -and (@('Query (cdxml)') -contains $PSCmdlet.ParameterSetName )) {
    $__cmdletization_queryBuilder.AddQueryOption('IncludeAllCompartments', ${IncludeAllCompartments})
    }


    $__cmdletization_objectModelWrapper.ProcessRecord($__cmdletization_queryBuilder)
            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    End {
        try
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper.EndProcessing()
            }
        }
        catch
        {
            throw
        }
    }

    # .EXTERNALHELP MSFT_NetIPAddress.cdxml-Help.xml
}
Microsoft.PowerShell.Core\Export-ModuleMember -Function 'Get-NetIPAddress' -Alias '*'
        

function Set-NetIPAddress
{
    [CmdletBinding(DefaultParameterSetName='Query (cdxml)', SupportsShouldProcess=$true, ConfirmImpact='Medium', PositionalBinding=$false)]
    
    [OutputType([Microsoft.Management.Infrastructure.CimInstance])]
[OutputType('Microsoft.Management.Infrastructure.CimInstance#ROOT/StandardCimv2/MSFT_NetIPAddress')]

    param(
    
    [Parameter(ParameterSetName='Query (cdxml)', Position=0, ValueFromPipelineByPropertyName=$true)]
    [Alias('LocalAddress')]
    [ValidateNotNull()]
    [string[]]
    ${IPAddress},

    [Parameter(ParameterSetName='Query (cdxml)', ValueFromPipelineByPropertyName=$true)]
    [Alias('ifIndex')]
    [ValidateNotNull()]
    [uint32[]]
    ${InterfaceIndex},

    [Parameter(ParameterSetName='Query (cdxml)', ValueFromPipelineByPropertyName=$true)]
    [Alias('ifAlias')]
    [ValidateNotNull()]
    [string[]]
    ${InterfaceAlias},

    [Parameter(ParameterSetName='Query (cdxml)')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPAddress.AddressFamily[]]
    ${AddressFamily},

    [Parameter(ParameterSetName='Query (cdxml)')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPAddress.Type[]]
    ${Type},

    [Parameter(ParameterSetName='Query (cdxml)')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPAddress.PrefixOrigin[]]
    ${PrefixOrigin},

    [Parameter(ParameterSetName='Query (cdxml)')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPAddress.SuffixOrigin[]]
    ${SuffixOrigin},

    [Parameter(ParameterSetName='Query (cdxml)')]
    [ValidateNotNull()]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPAddress.AddressState[]]
    ${AddressState},

    [Parameter(ParameterSetName='Query (cdxml)')]
    [string]
    ${PolicyStore

ScriptBlock ID: b97ad571-effb-4e50-a29d-07e825bae79e
Path:
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=3
Type=Warning
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2137795
Keywords=None
Message=Creating Scriptblock text (2 of 5):

          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'PreferredLifetime'; ParameterType = 'System.TimeSpan'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('SkipAsSource')) {
          [object]$__cmdletization_value = ${SkipAsSource}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'SkipAsSource'; ParameterType = 'System.Boolean'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'SkipAsSource'; ParameterType = 'System.Boolean'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('PolicyStore')) {
          [object]$__cmdletization_value = ${PolicyStore}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'PolicyStore'; ParameterType = 'System.String'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'PolicyStore'; ParameterType = 'System.String'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'CmdletOutput'; ParameterType = 'Microsoft.Management.Infrastructure.CimInstance[]'; Bindings = 'Out'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

      $__cmdletization_returnValue = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{ Name = 'ReturnValue'; ParameterType = 'System.UInt32'; Bindings = 'Error'; Value = $null; IsValuePresent = $false }
      $__cmdletization_methodInvocationInfo = [Microsoft.PowerShell.Cmdletization.MethodInvocationInfo]::new('Create', $__cmdletization_methodParameters, $__cmdletization_returnValue)
      $__cmdletization_objectModelWrapper.ProcessRecord($__cmdletization_methodInvocationInfo)
        }
        { @('ByInterfaceIndex') -contains $_ } {
        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('IPAddress')) {
          [object]$__cmdletization_value = ${IPAddress}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'IPAddress'; ParameterType = 'System.String'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'IPAddress'; ParameterType = 'System.String'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('InterfaceIndex')) {
          [object]$__cmdletization_value = ${InterfaceIndex}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'InterfaceIndex'; ParameterType = 'System.UInt32'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'InterfaceIndex'; ParameterType = 'System.UInt32'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('DefaultGateway')) {
          [object]$__cmdletization_value = ${DefaultGateway}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'DefaultGateway'; ParameterType = 'System.String'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'DefaultGateway'; ParameterType = 'System.String'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('AddressFamily')) {
          [object]$__cmdletization_value = ${AddressFamily}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'AddressFamily'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPAddress.AddressFamily'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'AddressFamily'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPAddress.AddressFamily'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('Type')) {
          [object]$__cmdletization_value = ${Type}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'Type'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPAddress.Type'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'Type'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPAddress.Type'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('PrefixLength')) {
          [object]$__cmdletization_value = ${PrefixLength}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'PrefixLength'; ParameterType = 'System.Byte'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'PrefixLength'; ParameterType = 'System.Byte'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('ValidLifetime')) {
          [object]$__cmdletization_value = ${ValidLifetime}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'ValidLifetime'; ParameterType = 'System.TimeSpan'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'ValidLifetime'; ParameterType = 'System.TimeSpan'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('PreferredLifetime')) {
          [object]$__cmdletization_value = ${PreferredLifetime}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'PreferredLifetime'; ParameterType = 'System.TimeSpan'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'PreferredLifetime'; ParameterType = 'System.TimeSpan'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('SkipAsSource')) {
          [object]$__cmdletization_value = ${SkipAsSource}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'SkipAsSource'; ParameterType = 'System.Boolean'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'SkipAsSource'; ParameterType = 'System.Boolean'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('PolicyStore')) {
          [object]$__cmdletization_value = ${PolicyStore}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'PolicyStore'; ParameterType = 'System.String'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'PolicyStore'; ParameterType = 'System.String'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'CmdletOutput'; ParameterType = 'Microsoft.Management.Infrastructure.CimInstance[]'; Bindings = 'Out'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

      $__cmdletization_returnValue = [Micr

ScriptBlock ID: b97ad571-effb-4e50-a29d-07e825bae79e
Path:
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=3
Type=Warning
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2137794
Keywords=None
Message=Creating Scriptblock text (1 of 5):

#requires -version 3.0

try { Microsoft.PowerShell.Core\Set-StrictMode -Off } catch { }

$script:MyModule = $MyInvocation.MyCommand.ScriptBlock.Module

$script:ClassName = 'ROOT/StandardCimv2/MSFT_NetIPAddress'
$script:ClassVersion = '1.0.0'
$script:ModuleVersion = '1.0.0'
$script:ObjectModelWrapper = [Microsoft.PowerShell.Cmdletization.Cim.CimCmdletAdapter]

$script:PrivateData = [System.Collections.Generic.Dictionary[string,string]]::new()

Microsoft.PowerShell.Core\Export-ModuleMember -Function @()
        

function __cmdletization_BindCommonParameters
{
    param(
        $__cmdletization_objectModelWrapper,
        $myPSBoundParameters
    )       
                

        if ($myPSBoundParameters.ContainsKey('CimSession')) { 
            $__cmdletization_objectModelWrapper.PSObject.Properties['CimSession'].Value = $myPSBoundParameters['CimSession'] 
        }
                    

        if ($myPSBoundParameters.ContainsKey('ThrottleLimit')) { 
            $__cmdletization_objectModelWrapper.PSObject.Properties['ThrottleLimit'].Value = $myPSBoundParameters['ThrottleLimit'] 
        }
                    

        if ($myPSBoundParameters.ContainsKey('AsJob')) { 
            $__cmdletization_objectModelWrapper.PSObject.Properties['AsJob'].Value = $myPSBoundParameters['AsJob'] 
        }
                    

}
                

function New-NetIPAddress
{
    [CmdletBinding(DefaultParameterSetName='ByInterfaceAlias', SupportsShouldProcess=$true, ConfirmImpact='Medium', PositionalBinding=$false)]
    
    [OutputType([Microsoft.Management.Infrastructure.CimInstance[]])][OutputType([Microsoft.Management.Infrastructure.CimInstance[]])]
    param(
    
    [Parameter(ParameterSetName='ByInterfaceAlias', Mandatory=$true, Position=0, ValueFromPipelineByPropertyName=$true)]
    [Parameter(ParameterSetName='ByInterfaceIndex', Mandatory=$true, Position=0, ValueFromPipelineByPropertyName=$true)]
    [Alias('LocalAddress')]
    [string]
    ${IPAddress},

    [Parameter(ParameterSetName='ByInterfaceAlias', Mandatory=$true, ValueFromPipelineByPropertyName=$true)]
    [Alias('ifAlias')]
    [string]
    ${InterfaceAlias},

    [Parameter(ParameterSetName='ByInterfaceAlias')]
    [Parameter(ParameterSetName='ByInterfaceIndex')]
    [string]
    ${DefaultGateway},

    [Parameter(ParameterSetName='ByInterfaceAlias')]
    [Parameter(ParameterSetName='ByInterfaceIndex')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPAddress.AddressFamily]
    ${AddressFamily},

    [Parameter(ParameterSetName='ByInterfaceAlias')]
    [Parameter(ParameterSetName='ByInterfaceIndex')]
    [Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPAddress.Type]
    ${Type},

    [Parameter(ParameterSetName='ByInterfaceAlias')]
    [Parameter(ParameterSetName='ByInterfaceIndex')]
    [byte]
    ${PrefixLength},

    [Parameter(ParameterSetName='ByInterfaceAlias')]
    [Parameter(ParameterSetName='ByInterfaceIndex')]
    [timespan]
    ${ValidLifetime},

    [Parameter(ParameterSetName='ByInterfaceAlias')]
    [Parameter(ParameterSetName='ByInterfaceIndex')]
    [timespan]
    ${PreferredLifetime},

    [Parameter(ParameterSetName='ByInterfaceAlias')]
    [Parameter(ParameterSetName='ByInterfaceIndex')]
    [bool]
    ${SkipAsSource},

    [Parameter(ParameterSetName='ByInterfaceAlias')]
    [Parameter(ParameterSetName='ByInterfaceIndex')]
    [string]
    ${PolicyStore},

    [Parameter(ParameterSetName='ByInterfaceIndex', Mandatory=$true, ValueFromPipelineByPropertyName=$true)]
    [Alias('ifIndex')]
    [uint32]
    ${InterfaceIndex},

    [Parameter(ParameterSetName='ByInterfaceAlias')]
    [Parameter(ParameterSetName='ByInterfaceIndex')]
    [Alias('Session')]
    [ValidateNotNullOrEmpty()]
    [CimSession[]]
    ${CimSession},

    [Parameter(ParameterSetName='ByInterfaceAlias')]
    [Parameter(ParameterSetName='ByInterfaceIndex')]
    [int]
    ${ThrottleLimit},

    [Parameter(ParameterSetName='ByInterfaceAlias')]
    [Parameter(ParameterSetName='ByInterfaceIndex')]
    [switch]
    ${AsJob})

    DynamicParam {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper = $script:ObjectModelWrapper::new()
                $__cmdletization_objectModelWrapper.Initialize($PSCmdlet, $script:ClassName, $script:ClassVersion, $script:ModuleVersion, $script:PrivateData)

                if ($__cmdletization_objectModelWrapper -is [System.Management.Automation.IDynamicParameters])
                {
                    ([System.Management.Automation.IDynamicParameters]$__cmdletization_objectModelWrapper).GetDynamicParameters()
                }
            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }

    Begin {
        $__cmdletization_exceptionHasBeenThrown = $false
        try 
        {
            __cmdletization_BindCommonParameters $__cmdletization_objectModelWrapper $PSBoundParameters
            $__cmdletization_objectModelWrapper.BeginProcessing()
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    Process {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
      $__cmdletization_methodParameters = [System.Collections.Generic.List[Microsoft.PowerShell.Cmdletization.MethodParameter]]::new()

      switch -exact ($PSCmdlet.ParameterSetName) { 
        { @('ByInterfaceAlias') -contains $_ } {
        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('IPAddress')) {
          [object]$__cmdletization_value = ${IPAddress}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'IPAddress'; ParameterType = 'System.String'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'IPAddress'; ParameterType = 'System.String'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('InterfaceAlias')) {
          [object]$__cmdletization_value = ${InterfaceAlias}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'InterfaceAlias'; ParameterType = 'System.String'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'InterfaceAlias'; ParameterType = 'System.String'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('DefaultGateway')) {
          [object]$__cmdletization_value = ${DefaultGateway}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'DefaultGateway'; ParameterType = 'System.String'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'DefaultGateway'; ParameterType = 'System.String'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('AddressFamily')) {
          [object]$__cmdletization_value = ${AddressFamily}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'AddressFamily'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPAddress.AddressFamily'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'AddressFamily'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPAddress.AddressFamily'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('Type')) {
          [object]$__cmdletization_value = ${Type}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'Type'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPAddress.Type'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'Type'; ParameterType = 'Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPAddress.Type'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('PrefixLength')) {
          [object]$__cmdletization_value = ${PrefixLength}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'PrefixLength'; ParameterType = 'System.Byte'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'PrefixLength'; ParameterType = 'System.Byte'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('ValidLifetime')) {
          [object]$__cmdletization_value = ${ValidLifetime}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'ValidLifetime'; ParameterType = 'System.TimeSpan'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'ValidLifetime'; ParameterType = 'System.TimeSpan'; Bindings = 'In'; Value = $__cmdletization_defaultValue; IsValuePresent = $__cmdletization_defaultValueIsPresent}
        }
        $__cmdletization_methodParameters.Add($__cmdletization_methodParameter)

        [object]$__cmdletization_defaultValue = $null
        [object]$__cmdletization_defaultValueIsPresent = $false
        if ($PSBoundParameters.ContainsKey('PreferredLifetime')) {
          [object]$__cmdletization_value = ${PreferredLifetime}
          $__cmdletization_methodParameter = [Microsoft.PowerShell.Cmdletization.MethodParameter]@{Name = 'PreferredLifetime'; ParameterType = 'System.TimeSpan'; Bindings = 'In'; Value = $__cmdletization_value; IsValuePresent = $true}
        } else {


ScriptBlock ID: b97ad571-effb-4e50-a29d-07e825bae79e
Path:
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137793
Keywords=None
Message=Completed invocation of ScriptBlock ID: acb6188e-43e7-415a-8911-3c5a23499dc4
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137792
Keywords=None
Message=Started invocation of ScriptBlock ID: acb6188e-43e7-415a-8911-3c5a23499dc4
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=3
Type=Warning
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2137791
Keywords=None
Message=Creating Scriptblock text (1 of 1):

#requires -version 3.0

try { Microsoft.PowerShell.Core\Set-StrictMode -Off } catch { }

$script:MyModule = $MyInvocation.MyCommand.ScriptBlock.Module

$script:ClassName = 'root/StandardCimv2/MSFT_NetCompartment'
$script:ClassVersion = '1.0.0'
$script:ModuleVersion = '1.0'
$script:ObjectModelWrapper = [Microsoft.PowerShell.Cmdletization.Cim.CimCmdletAdapter]

$script:PrivateData = [System.Collections.Generic.Dictionary[string,string]]::new()

Microsoft.PowerShell.Core\Export-ModuleMember -Function @()
        

function __cmdletization_BindCommonParameters
{
    param(
        $__cmdletization_objectModelWrapper,
        $myPSBoundParameters
    )       
                

        if ($myPSBoundParameters.ContainsKey('CimSession')) { 
            $__cmdletization_objectModelWrapper.PSObject.Properties['CimSession'].Value = $myPSBoundParameters['CimSession'] 
        }
                    

        if ($myPSBoundParameters.ContainsKey('ThrottleLimit')) { 
            $__cmdletization_objectModelWrapper.PSObject.Properties['ThrottleLimit'].Value = $myPSBoundParameters['ThrottleLimit'] 
        }
                    

        if ($myPSBoundParameters.ContainsKey('AsJob')) { 
            $__cmdletization_objectModelWrapper.PSObject.Properties['AsJob'].Value = $myPSBoundParameters['AsJob'] 
        }
                    

}
                

function Get-NetCompartment
{
    [CmdletBinding(DefaultParameterSetName='Query (cdxml)', PositionalBinding=$false)]
    
    [OutputType([Microsoft.Management.Infrastructure.CimInstance])]
[OutputType('Microsoft.Management.Infrastructure.CimInstance#root/StandardCimv2/MSFT_NetCompartment')]

    param(
    
    [Parameter(ParameterSetName='Query (cdxml)')]
    [ValidateNotNull()]
    [uint32[]]
    ${CompartmentId},

    [Parameter(ParameterSetName='Query (cdxml)')]
    [Alias('Session')]
    [ValidateNotNullOrEmpty()]
    [CimSession[]]
    ${CimSession},

    [Parameter(ParameterSetName='Query (cdxml)')]
    [int]
    ${ThrottleLimit},

    [Parameter(ParameterSetName='Query (cdxml)')]
    [switch]
    ${AsJob})

    DynamicParam {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper = $script:ObjectModelWrapper::new()
                $__cmdletization_objectModelWrapper.Initialize($PSCmdlet, $script:ClassName, $script:ClassVersion, $script:ModuleVersion, $script:PrivateData)

                if ($__cmdletization_objectModelWrapper -is [System.Management.Automation.IDynamicParameters])
                {
                    ([System.Management.Automation.IDynamicParameters]$__cmdletization_objectModelWrapper).GetDynamicParameters()
                }
            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }

    Begin {
        $__cmdletization_exceptionHasBeenThrown = $false
        try 
        {
            __cmdletization_BindCommonParameters $__cmdletization_objectModelWrapper $PSBoundParameters
            $__cmdletization_objectModelWrapper.BeginProcessing()
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    Process {
        try 
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
    $__cmdletization_queryBuilder = $__cmdletization_objectModelWrapper.GetQueryBuilder()
    if ($PSBoundParameters.ContainsKey('CompartmentId') -and (@('Query (cdxml)') -contains $PSCmdlet.ParameterSetName )) {
        $__cmdletization_values = @(${CompartmentId})
        $__cmdletization_queryBuilder.FilterByProperty('CompartmentId', $__cmdletization_values, $false, 'Default')
    }


    $__cmdletization_objectModelWrapper.ProcessRecord($__cmdletization_queryBuilder)
            }
        }
        catch
        {
            $__cmdletization_exceptionHasBeenThrown = $true
            throw
        }
    }
        

    End {
        try
        {
            if (-not $__cmdletization_exceptionHasBeenThrown)
            {
                $__cmdletization_objectModelWrapper.EndProcessing()
            }
        }
        catch
        {
            throw
        }
    }

    # .EXTERNALHELP MSFT_NetCompartment.cdxml-Help.xml
}
Microsoft.PowerShell.Core\Export-ModuleMember -Function 'Get-NetCompartment' -Alias '*'
        


ScriptBlock ID: acb6188e-43e7-415a-8911-3c5a23499dc4
Path:
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2137790
Keywords=None
Message=Completed invocation of ScriptBlock ID: eb94b9dc-c4d5-4218-8fcb-841bacdbf692
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137789
Keywords=None
Message=Started invocation of ScriptBlock ID: eb94b9dc-c4d5-4218-8fcb-841bacdbf692
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2137788
Keywords=None
Message=Started invocation of ScriptBlock ID: f4c3dcf8-071d-42d9-9805-1ee066031172
Runspace ID: 6f3eb055-e094-4e5b-94ce-5eca3a1856b6
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4104
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Execute a Remote Command
OpCode=On create calls
RecordNumber=2137787
Keywords=None
Message=Creating Scriptblock text (1 of 1):
Get-NetTcpConnection

ScriptBlock ID: f4c3dcf8-071d-42d9-9805-1ee066031172
Path:
09/10/2021 03:09:48 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=40962
EventType=4
Type=Information
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=PowerShell Console Startup
OpCode=Stop
RecordNumber=2137786
Keywords=None
Message=PowerShell console is ready for user input
09/10/2021 03:09:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138272
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138271
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138270
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138269
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138268
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138267
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138266
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138265
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138264
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:52 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138263
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138282
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138281
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138280
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138279
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138278
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138277
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138276
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138275
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138274
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:09:57 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138273
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:10:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138289
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:10:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138288
Keywords=None
Message=Completed invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:10:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138287
Keywords=None
Message=Started invocation of ScriptBlock ID: 05c95d33-f989-43da-98b0-0935e9b9d787
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:10:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138286
Keywords=None
Message=Completed invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:10:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138285
Keywords=None
Message=Started invocation of ScriptBlock ID: 814708c6-dacd-4473-87cf-ec01b4626b2a
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:10:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138284
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:10:01 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138283
Keywords=None
Message=Started invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:10:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138292
Keywords=None
Message=Completed invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:10:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4105
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Starting Command
OpCode=On create calls
RecordNumber=2138291
Keywords=None
Message=Started invocation of ScriptBlock ID: 2394b1ee-8edd-421a-ab65-1527ea0df67e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa
09/10/2021 03:10:02 PM
LogName=Microsoft-Windows-PowerShell/Operational
SourceName=Microsoft-Windows-PowerShell
EventCode=4106
EventType=5
Type=Verbose
ComputerName=win-host-987.attackrange.local
User=NOT_TRANSLATED
Sid=S-1-5-21-1166625382-1442148322-2337405042-2397
SidType=0
TaskCategory=Stopping Command
OpCode=On create calls
RecordNumber=2138290
Keywords=None
Message=Completed invocation of ScriptBlock ID: 52a2683a-ff39-4e9b-bbd9-f6ddd86cb52e
Runspace ID: c0a71f6f-f218-409f-87f9-a7e84bc3d0fa